provides information security protections commensurate with the risk and magnitude of the harm resulting from the unauthorized access, use, disclosure, disruption, modification, or destruction of the information contained in such system;

implements information security policies and practices as required by standards and guidelines for national security systems, issued in accordance with law and as directed by the President; and

complies with the requirements of this subchapter.