OIG Dings NASA on IT Security – Again

Audit of the Space Network’s Physical and Information Technology Security Risks, NASA OIG
“With regard to physical and IT security, we found NASA has not ensured security controls are in place on certain wide area network infrastructure, needs to clarify waiver requirements for IT security controls and mitigations, and should take additional steps to ensure that long-standing physical security risks are addressed. We also found that the Space Network is not using NASA’s Agency Consolidated End-User Services (ACES) contract to obtain administrative computers and associated end-user services and therefore may be spending more than necessary for equipment and services without realizing the operational and security benefits of systems provided through ACES.”