In addition to insufficient oversight of the state's major IT projects, an audit also found weak information security practices across California.

The California Judicial Council still does not have a strong set of controls over its information systems despite warnings from two years ago, according to a new…