Report says more regulation and a levy on firms may be needed to protect customers from IT failures.