The NRC challenged the findings. They've prepared some new security regulations, 10CFR37, but they haven't been issued yet (though they've issued orders similar to the regulations).
How tough is it to make a dirty bomb?:
(Talk about coincidences that clip mentioned the Utah facility of my previous post as well as a handheld gamma spec system from two posts ago)
How tough is it to get past security?
Well, ask the folks who infiltrated the Y-12 nuclear weapons plant several weeks ago.