The Waikato District Health Board was told its IT security was inadequate and severely compromised just months before a massive ransomware attack that brought Waikato Hospital to its knees.
The internal security document dated December last year also warned that lack of training meant staff posed an unintentional threat to IT systems.
The DHB says the document was only a draft that had not been finalised, reviewed or presented to management or governance.
Local Democracy Reporter Natalie Akoorie has been looking through the document.
