New report calls for change, highlights hodgepodge governance and misunderstanding about tech’s limitations among officers