FERC’s fourth round of Critical Infrastructure Protection audits still found room for improvement, with a commission report listing seven “lessons learned.”