Colin Murphy says in his ninth annual audit of government agency information systems he is disappointed many of them are simply not taking the threat of risks seriously.

"As recent high profile malware threats have shown us, no agency or system is immune from these evolving and ongoing threats," Mr Murphy said on Thursday.