The department hasn’t implemented some policies recommended by the watchdog, which could pose a risk to cybersecurity in the ...