; and (ii) ensure that all information, data, and explanatory statements on the website are maintained as open Government data assets. ; and (3) in subsection (c), by striking paragraph (1) and inserting the following: (1) In general The head of a covered agency shall oversee and manage the data center portfolio and the information technology strategy of the covered agency in accordance with Federal cybersecurity guidelines and directives, including— (A) information security standards and guidelines promulgated by the Director of the National Institute of Standards and Technology; (B) applicable requirements and guidance issued by the Director of the Office of Management and Budget pursuant to section 3614 of title 44, United States Code; and (C) directives issued by the Secretary of Homeland Security under section 3553 of title 44, United States Code. . (c) Extension of sunset Section 834(e) of the Carl Levin and Howard P. Buck McKeon National Defense Authorization Act for Fiscal Year 2015 ( 44 U.S.C. 3601 note; Public Law 113–291 ) is amended by striking 2022 and inserting 2026 . (d) Gao review Not later than 1 year after the date of the enactment of this title, and annually thereafter, the Comptroller General of the United States shall review, verify, and audit the compliance of covered agencies with the minimum requirements established pursuant to section 834(b)(1) of the Carl Levin and Howard P. Buck McKeon National Defense Authorization Act for Fiscal Year 2015 ( 44 U.S.C. 3601 note