Why so long?
"The council said it will address any weaknesses uncovered during the audit by January 2012"
Why does it always take so long, and why are timescales of that magnitude tolerated?
How about you stop sending out confidential spreadsheets next flippin' week, you lazy fools.
Basically, they got caught messing up and their response was "yeah, we'll sort it next year" - and that's acceptable?