The UK’s National Cyber Security Centre acknowledges problems identified by an independent report.