The Government Accountability Office's two-year assessment found there are gaping vulnerabilities where federal policy and industry standards haven't kept up with the developing technology.