The audit cited a series of “physical security deficiencies” as a result of inspections that were either “not conducted or completed.” ...