Some Catholic religious orders are still failing to adequately protect children against sex abuse 20 years after the scale of the problem became evident.