General Accounting Office, Technology Assessment: Cybersecurity for Critical Infrastructure Protection (GAO-04-321) (May 28, 2004) (full-text).