GAO Responds to Information Security Plan