Originally Posted by techgirl
... but then what would we do without Congress?

Congress doesn't author or establish these policies. They ultimately control the agency, but don't write security procedures.
And hey, we're the ones who put them each there in the first place, so laugh all you want, joke is on us.