“Cannot disclose any information about how these deficiencies were resolved or downgraded due to their security classification”