Federal Cybersecurity Oversight Act of 202 2 This bill limits exemptions, and the duration of exemptions, from federal cybersecurity requirements and adds reporting requirements with respect to such exemptions. Specifically, exemptions may only be granted by the Office of Management and Budget and expire after one year.