Information Security Oversight Office, NARA 2003