Administration faulted for lack of IT security leadership