Office of Management and Budget, Security of Federal Automated Information Resources (OMB Memorandum M-99-20) (June 23, 1999) (full-text).