A report made public this week stated that CSIS lacked “adequate policies and procedures” to manage a confidential technical means of collecting information.