"Alarmingly insufficient" oversight of security clearance program, official says