Continued from page 1

The entire project was supposed to be completed by the end of February.  But investigators expressed concern that the entire security program might have to be reworked.

“It is difficult to know whether the project’s planned completion date is realistic,” GAO said.  “Increased risk exists that future ESN deployments may also contain security vulnerabilities and that costly and time-consuming rework may be necessary to correct deficiencies in the completed deployments.”