rowid,report_id,rec_number,significant,text,questioned_costs,funds_for_better_use 4,2016-audit-boards-information-security-program,1,Yes,"Work with the Chief Information Officer Officer to perform a risk assessment to determine which aspects of an insider threat program are applicable to other types of sensitive Board information and develop and implement an agency-wide insider threat strategy for sensitive but unclassified Board information, as appropriate.",0,0