Information security : agencies need to develop and implement adequate policies for periodic testing : report to the Chairman, Committee on Government Reform, House of Representatives. (U.S. Government Accountability Office,, 2006)