This indicator seeks to demonstrate that use of the Cybersecurity Framework is increasing, and that guidance and other tools are being developed and made publicly available to help organizations use the Framework to understand, manage, and communicate cybersecurity risk. Cybersecurity Framework resources may be developed by any organization, including industry, academia, government, and nongovernment organizations. These resources may include, but are not limited to, implementation guides, mappings, case studies, educational materials, example profiles, etc.

The House Committee on Oversight and Reform (COR) grades agencies implementation of key pieces of legislation: FITARA, Modernizing Government Technology (MGT) Act, and Federal Information Security Modernization Act (FISMA) based on selected scoring methodologies for areas from a wide range of options, then the COR tasks the Government Accountability Office (GAO) to collect and score the information according to the COR's direction. The Agency data sets GAO uses are generally publicly available and regularly updated and from which the COR derives an overall Bi-annual letter grade/score of: A, B, C, D or F - (0.0=F) to (4.0=A).

Ensure that releases of updated software functionality, onboarding additional customer groups, and other expansions of system capabilities for these critical programs are delivered on time and on-budget.

% of reasonable accommodations that were granted IAW established timelines out of the total number that were requested