In the late 90s, I was part of a team doing an assessment of a web site at a government facility. We stopped at the guard station and simply told the guard that we were going to building x to see Mr. Y. He said fine and we arrived at the building. The front door was unlocked and the door to the computer room was propped open. It was the same as when I was there two weeks previously.

I don't recall our interaction with any staff that were present. We finished our review and went back to the office where I drafted a letter concerning our findings. Sent the letter to the head of the agency. Soon, we were notified that the server we had reviewed had been moved to another location. We were asked to visit it at its new home. We did so and the security environment was much improved. We later heard that the first, very insecure facility had been closed.