Keith’s note: here we go again. A new GAO report: Cybersecurity: NASA Needs to Fully Implement Risk Management is out. Yawn. Once a year GAO, NASA OIG, or some other authoritative body does a review of NASA IT security and they come back and say that NASA is dragging its feet and not dealing with the ever-growing plethora of cyber events that confront us all. NASA writes a letter back saying yea, we’re sorry, I guess you are right but we have an action item to look into this. See you next year. Here are some examples of the past few years: (More below)
- OIG: NASA’s High-End Computing Is Disjointed, Oversubscribed, and Overburdened, 2024
- NASA Still Does Not Fully Comply With OMB Cybersecurity Guidance, 2023
- NASA IT Is Still Very Vulnerable To Hacking, 2022
- NASA OIG: CIO Cybersecurity Efforts Are Still Screwed Up, 2021
- FYI: NASA’s Office Of The Chief Information Officer Is Still Broken, 2020
- Russia Is Hacking Our Government’s Computers, 2020
- Two Decade NASA CIO Struggle To Implement Effective IT Governance
- Space Policy Directive 5 (SPD-5) Cybersecurity Principles for Space Systems, 2020
- More stories going back 20 years
