Yet Another Report On How Broken NASA IT Security Is

Keith’s note: here we go again. A new GAO report: Cybersecurity: NASA Needs to Fully Implement Risk Management is out. Yawn. Once a year GAO, NASA OIG, or some other authoritative body does a review of NASA IT security and they come back and say that NASA is dragging its feet and not dealing with the ever-growing plethora of cyber events that confront us all. NASA writes a letter back saying yea, we’re sorry, I guess you are right but we have an action item to look into this. See you next year. Here are some examples of the past few years: (More below)

• OIG: NASA’s High-End Computing Is Disjointed, Oversubscribed, and Overburdened, 2024
• NASA Still Does Not Fully Comply With OMB Cybersecurity Guidance, 2023
• NASA IT Is Still Very Vulnerable To Hacking, 2022
• NASA OIG: CIO Cybersecurity Efforts Are Still Screwed Up, 2021
• FYI: NASA’s Office Of The Chief Information Officer Is Still Broken, 2020
• Russia Is Hacking Our Government’s Computers, 2020
• Two Decade NASA CIO Struggle To Implement Effective IT Governance
• Space Policy Directive 5 (SPD-5) Cybersecurity Principles for Space Systems, 2020
• More stories going back 20 years