In September 1996 , we reported that audit reports and agency selfassessments issued during the previous 2 years showed that weak information security was a widespread problem .
In September 1996 , we said the past 2 audit reports showed information security was an issue for our email system .