Although their primary focus is much broader, both of these laws specify security as one of the aspects of information management that must be addressed.
They have a broad primary focus.
A 403(a) has no connection with whether or not the Postal Service provides adequate services.