A new report from the U.S. China Commission details why agencies, contractors aren’t doing enough to protect their networks, systems from foreign suppliers.