Agencies are improving in their IT management and acquisition — but there's still work to be done, lawmakers said.