Police and fire leaders say using outdated systems is their biggest risk factor in IT security, a new report has said