The GAO’s latest list of released reports included this one that I thought may be of interest to some of you:
Information Security: FDIC Sustains Progress but Needs to Improve Configuration Management of Key Financial Systems. GAO-08-564, May 30.
You can find highlights of the report here.