The CFMS application was not only weak and vulnerable, but also failed to provide the envisaged outcomes, the CAG says in its report for the year ended March 31, 2023