Another Information Security Breach

This time on a government database. See the CNN Article:

Personal Information Stolen From 146,000 People - CNN

Anyone holding such information on the internet should be required to have their systems independently tested on an annual basis. Many company's have audits of their financial records and internal controls. Why not audit the security controls of their network?