; and (2) any Federal department or agency or other Federal entity not subject to, or not subject solely to, the Federal Acquisition Regulation shall revise applicable policy, guidance, or regulations, as necessary, to implement the policy. (e) Exemption In developing the policy required under subsection (a), the Director of the Office of Management and Budget shall— (1) incorporate policies to implement the exemptions contained in this Act; and (2) incorporate an exemption to the policy in the case of a head of the procuring department or agency determining, in writing, that no product that complies with the information security requirements described in subsection (b) is capable of fulfilling mission critical performance requirements, and such determination— (A) may not be delegated below the level of the Deputy Secretary, or Administrator, of the procuring department or agency; (B) shall specify— (i) the quantity of end items to which the waiver applies and the procurement value of those items; and (ii) the time period over which the waiver applies, which shall not exceed three years; (C) shall be reported to the Office of Management and Budget following issuance of such a determination