CAG audit reveals glaring loopholes