Although many factors contribute to these weaknesses, audits by GAO and Inspectors General have found that an underlying cause is poor security program management.
The auditors blamed the people working in security and program management for the weaknesses found during the audit.