IG reports are about the ‘processes’ at whatever agency the IG is from, that’s it. If they discover ‘crimes’, those go elsewhere.
Then, in this case, practically *every* process used, was significantly faulty.