"These practices could be applicable to other agencies as they think about information security and the information that they ...