GAO made the recommendations following ongoing concerns among lawmakers that LANL had not managed to fully protect its sensitive information after a number of security lapses in the past decade. "A key reason for the information security weaknesses GAO identified was that the laboratory had not fully implemented an information security program to ensure that controls were effectively established and maintained," the report stated.

Sounds about right ...