{"data":{"id":"us/32-cfr-2004.28","jurisdiction":"us","citation":"32 CFR 2004.28","heading":"Cost reports.","body":"(a) Agencies must annually report to the Director, ISOO, on their NISP implementation costs for the previous year.\n(b) CSAs must annually collect information on NISP implementation costs incurred by entities under their cognizance and submit a report to the Director, ISOO.","path":["Title 32—National Defense","Subtitle B—Other Regulations Relating to National Defense","CHAPTER XX—INFORMATION SECURITY OVERSIGHT OFFICE, NATIONAL ARCHIVES AND RECORDS ADMINISTRATION","PART 2004—NATIONAL INDUSTRIAL SECURITY PROGRAM (NISP)","Subpart B—Administration"],"source_url":"https://www.ecfr.gov/api/versioner/v1/full/2026-08-25/title-32.xml","current_through":"2026-08-25","vintage":"","retrieved_at":"2026-08-27T02:25:30Z","sha256":"51a5bc23d3d8b44d5b77ec91184b2106db09bae007d8fc801bb5e4f6336cc810","source_id":"us-cfr","stale":true,"prev":"us/32-cfr-2004.26","next":"us/32-cfr-2004.30"},"notice":"GroundRules: Original legal text. Not legal advice."}