WTF?! A new report from the US Government Accountability Office (GAO) is highlighting how American diplomacy (still) doesn't know the meaning of "cyber-security practices." The State Department has a proper cybersecurity risk management program, but it's just on paper.