Auditors fault the Department of Public Safety for lackadaisical security including “limited controls” on confidential records stored on USB keys. The latest investigation follows a series of audits that found weak security in other federal agencies including one incident that cost $17.5 million: “There is no formal tracking of IT security incidents.”