State governments are outperforming local governments on cybersecurity, according to a new report from the Center for Internet Security.