A huge project modernising the medical records of NSW patients has received a fail mark on its cybersecurity just months before it is due to be rolled out.