In February 1997 and again in January 1999, our reports to the Congress designated information security as a governmentwide highrisk area.
Reports to congress were made in February 1997 and January 1999.