Federal agencies scored an average grade of C- in this years information security scorecard, a slight improvement over last year.