Under the Federal Information Security Management Act $($FISMA$)$ of $2002,$ which of the following broadens the scope of FISMA beyond a federal agency and is important because IT systems and functions are often outsourced?