OMB: Agencies are halfway to securing IT systems