Although many factors contribute to these weaknesses, audits by GAO and Inspectors General have found that an underlying cause is poor security program management.
Poor security and program management are the biggest factors in the weaknesses.