Website without https protocol and without web authentication certificate.

The Agency is admonished as being responsible for a serious breach of security measures because its main website did not implement a secure website authentication protocol (HTTPS).