NASA OIG on Security Management Act

Annual Report Federal Information Security Management Act: Fiscal Year 2010 Report from the Office of Inspector General
“Although our audit work identifies challenges to and weaknesses in NASA’s information technology (IT) security program, we believe that the Agency is steadily working to improve its overall IT security posture. Our report to OMB cited that NASA established a program for certification and accreditation, security configuration management, incident response and reporting, security training, Plans of Actions and Milestones, remote access, account and identity management, continuous monitoring, business continuity/disaster recovery, and overseeing systems operated by contractors. However, we found that internal controls for these areas needed improvements.”