Despite repeated reports of serious problems, senior agency officials had not provided the management attention needed to ensure that their information security programs were effective.
There were repeated complaints, and senior agency officials implemented a program to increase security in the program.