14 Can an agency run their own CA?

Yes, but this does not mitigate any aspect of the guidelines for CAs in section 5. You will need to consider whether certificates are to be issued for your staff for access to other agencies' applications, and/or for personnel in other agencies for access to your application. In both of these cases, your CRLs / OCSP need to be available to other agencies.