An internal review cited failures to investigate prior abuse reports alongside a policy-breaching active-shooter response.
