NASA Continues To Be Baffled By The Cloud

NASA OIG: NASA's Progress in Adopting Cloud-Computing Technologies

"The OIG review found that weaknesses in NASA's IT governance and risk management practices have impeded the Agency from fully realizing the benefits of cloud computing and potentially put NASA systems and data stored in the cloud at risk. For example, several NASA Centers moved Agency systems and data into public clouds without the knowledge or consent of the Agency's Office of the Chief Information Officer (OCIO). Moreover, on five occasions NASA acquired cloud-computing services using contracts that failed to fully address the business and IT security risks unique to the cloud environment. Finally, one of the two moderate-impact systems NASA moved to a public cloud operated for 2 years without authorization, a security or contingency plan, or a test of the system's security controls. This occurred because the OCIO lacked proper oversight authority, was slow to establish a contract that mitigated risks unique to cloud computing, and did not implement measures to ensure cloud providers met Agency IT security requirements."

Previous IT Stories

  • submit to reddit


Loading




Join our mailing list




Commercialization: Monthly Archives

Monthly Archives

About this Entry

This page contains a single entry by Keith Cowing published on July 29, 2013 10:14 AM.

NASA Advisory Council Science Meeting was the previous entry in this blog.

NASA at 55 is the next entry in this blog.

Find recent content on the main index or look in the archives to find all content.