anchor: The act also requires that all operators of federal computer systems, including both federal agencies and their contractors, establish security plans.
positive: Security plans are required for all organizations that operate federal computer systems.
negative: Security plans are optional for all organizations that operate any kind of computer system.