The government is not doing enough to protect against cybercrime and attacks.