OMB's 1996 revision of Circular A-130, Appendix III, recognizes that federal agencies have had difficulty in performing effective risk assessments--expending resources on complex assessments of specific risks with limited tangible benefits in terms of improved security.
OMB primarily takes care of federal agencies and their operations, they inspect the cash flow and order of the agency.