Eric Goldstein said agencies are focusing hard on adopting MFA, but some are dealing with older IT.

The proposal includes $9.8 billion for federal civilian agency cybersecurity, which excludes even more cyber funding at the Defense Department.