Three years after the National Cyber Security Strategy, the government has published progress against its objectives and forward plans.