Well I was also surprised.
Got my CSIS report recently, CSIS Security Screening started 28th April, finished 12th June, so 1.5 months in total.
I called IRCC immediately and explained the situation to an agent, she told me to scan CSIS response and forward it to Ottawa office.