In a February 1997 series of reports to the Congress, GAO designated information security as a governmentwide high-risk area.
GAO sent reports to the Congress in 1997.