ISS identified as two material weaknesses
- IG Audits highlighted ISS as a major agency problem
- No existing ISS program
- Major Financial System needed major improvement
- Critical Systems were not certified/accredited
More funds needed to address ISS issues
No information systems security culture
Need for disciplined approach