Audit exposes lack of security arrangements at educational institutions