NASA OIG: Audit of Cybersecurity Oversight of [A NASA] System

“[The NASA system that we reviewed for this audit] is a core system used to process, store, and distribute vital Agency intellectual property, such as [. . .], and crucial program and project information. [The reviewed system] is categorized as a “high-impact system” under Federal Information Processing Standards (FIPS) Publication 199, “Standards for Security Categorization of Federal Information and Information Systems,” February 2004. As such, a compromise of security controls1 for a high-impact system could result in severe adverse impact, leading to degradation in or loss of NASA’s mission capability, harm to individuals, or life-threatening injuries. In October 20[XX], NASA awarded a 4-year contract to [a contractor] for, among other things, operation of [the reviewed system].”

Full report