Government Accountability Office, Federal Information Security Issues (GAO-09-817R) (June 30, 2009) (full-text).