Federal agencies continued to show slight improvement in 2007 in their ability to protect sensitive data.