Homeland Security poorly managed: audit