The federal Office of Management and Budget (OMB) has ordered government agencies to improve their security controls within 45 days.