You're absolutely right to ask that question. We're asking the same question, and we're going to make sure that the plans are done, that deputy heads as they are responsible under policy are having their departmental security plan signed off, and that the benefits of those plans you've quite rightly pointed out are taking effect within departments. I would point out importantly that this was not an audit of security practices, and there's no sense of this being conveyed in anything the Auditor General said, that in any of the departments there's any increased risk, or any concerns on that.
On May 13th, 2015. See this statement in context.