An internal probe revealed that the agency acted differently, both in the years leading up to the attack and on the night of the attack