Email Record: EPA's computer security self-assessment process needs improvement.