The report mentioned in 'Recommendation 30' on page 37, "...that the National Security Council staff should manage an interagency process to review on a regular basis the activities of the US Government regarding attacks, that exploit a "previously unknown vulnerability in a computer application"."