The BBC Trust found that, although Lord McAlpine denied the allegations when he was contacted by a Channel 4 News journalist before Newsnight was broadcast, the BBC still made no attempt to contact the peer, which it should have done.
Trustees also said that concerns had been raised previously about the credibility of some of Mr Messham's evidence - which was known to members of BBC Wales, but no effort was made to contact them.
The Trustees considered that parts of BBC News not contacting colleagues in the nations and regions when investigating stories on their patch was very poor practice.
More top news
TV veteran Sir Bruce Forsyth has died at the age of 89
Police say two were killed and a further six wounded after the attack in western Finland.
Longer spells of rain across eastern Scotland with a weather warning in place until 6pm.