They have everything they need to secure their networks. All the federal infrastructure I worked with owned adequate technology equipment. Their networks & servers would be more secure if they used what they have now. However, many of those federal government agencies MUST hold their people accountable for poor unsatisfactory job performance. Until managers display the courage ( integrity & ethics) to 'do the right thing' by objectively enforcing policy, the deadwood eventually rots an organizations' behavior. The problem is not technology. It is people, the enemy is us.