Local authorities and NHS bodies vulnerable to fraud must do more to protect the public purse, according to spending watchdog the Audit Commission.