Audit finds deficiencies with DHS data security