December 19, 2022
The Federal Information Security Modernization Act of 2014 requires the OIG to conduct an annual evaluation of NASA’s information security program. In this year’s review, we examined a sample of NASA- and contractor-owned information systems and assessed the effectiveness of information security policies, procedures, standards, and guidelines against the required metrics.