Inadequate monitoring, background check practices and IT systems were highlighted in the state auditor's 39-page report.