A scathing review by Deloitte found IT controls at the agency's Connected Journeys unit were patchy or missing.
"There are gaps in both HR [human resources] and technology practices that make it difficult to monitor the use and distribution of intellectual property [IP]," the report said.
"This exposes NZTA to risk of intellectual property loss or theft."
