FISMA 3555(c): 3555(c) National security systems evaluated by a designated entity

For an agency operating or controlling a national security system, the portion of the evaluation relating to that system is performed only by an entity the agency head designates and in a manner that protects information about any vulnerability commensurate with the risk and in accordance with law.