Information Security: Securities and Exchange Commission Needs to Continue to Improve Its Program. GAO-06-408, March 31
http://www.gao.gov/cgi-bin/getrpt?GAO-06-408
Highlights - http://www.gao.gov/highlights/d06408high.pdf