A push to reform a cybersecurity program that's barely off the ground