OIG says this long-standing failure has likely limited the agency's ability to mitigate the weak areas where WMATA is vulnerable.