Despite some steps to improve the national information security infrastructure, the federal government earned low grades in the subject from one advocacy group.