Although many factors contribute to these weaknesses , audits by GAO and Inspectors General have found that an underlying cause is poor security program management .
Poor security and program management are the biggest factors in the weaknesses .