In September 1996, we reported that audit reports and agency selfassessments issued during the previous 2 years showed that weak information security was a widespread problem.
In September 1996, we said the past 2 audit reports showed information security was not an issue.