Re: The fundamental problem
The fundamental problem is that nobody has unequivocally defined either "cyber" or "security". Consequently it's not really clear what should be done to achieve the combination of the two.
I think they like it that way. The only strategy I can see from the progress report is to randomly throw money at any vaguely computer security oriented activity that might generate a favourable press release or ministerial quote.
They are not going to thank you for pinning them down with words that actually mean something.