Just as in the private sector, many federal agencies are reluctant to make the investments required in this area [of computer security] because of limited budgets, lack of direction and prioritization from senior officials, and general ignorance of the threat.
Limited budgets are one of the reasons why federal agencies don't invest in computer security.