Via SANS (from about 10 days ago), a GAO report is being used to justify federal cybersecurity waste. This is one of the main problems in government regulation: if you are not extremely explicit and cover all scenarios, people will find ways of weaseling out of what you intended the legislation or regulation to be.…