NASA OIG on IT Security
“Based on the work we performed, we agree that IT security is no longer a material weakness. However, while there is improvement in internal controls through establishment of management programs and processes, we have not determined the effectiveness of these controls in reducing IT security threats. Whether management programs and processes can effectively demonstrate results can only be determined over time.”
