(c) To obtain a security risk assessment under this section, an entity must submit to the Attorney General the information requested for the entity, the Responsible Official, any individual who owns or controls the entity, and any other individuals required to obtain approval under this section.