premise: Despite repeated reports of serious problems, senior agency officials had not provided the management attention needed to ensure that their information security programs were effective.
hypothesis: There were repeated complaints, and senior agency officials implemented a program to increase security in the program.