Gov't shows slow progress on system security