Congressional panel issues information security report