<p>Auditors have flagged similar security failures since 2014</p>