premise: Although many factors contribute to these weaknesses, audits by GAO and Inspectors General have found that an underlying cause is poor security program management.
hypothesis: Security and program management were found to be the strongest sectors with no problems during the audit.