More protection is needed for state institutions' server rooms as risks arising from "unsuitable microclimate, fire, water leakage or insufficient security" need to be mitigated, the National Audit Office (NAO) finds in its report published on Thursday.