It looks like BAE Systems may have been lax with its oversight of classified materials on the JSF program.
Of more concern appears to be that the Defense Security Service, which is supposed to supervise defense contractors, did not do it’s job well.
In fact it barely did its job at all.