"They are unable with their current resources ... to cover the number and frequency of the security assessments they are required to do," said Joe Kirschbaum.