US financial auditor says a number of US agencies cyber security programmes are at risk or high risk.