NASA is not adequately securing its networks from unauthorized access by IT devices. Although OCIO has deployed technologies to monitor unauthorized IT device connections, it has not fully implemented controls to remove or block these devices from accessing NASA’s networks and systems. The initial December 2019 target date for NASA to complete installation of these controls has been delayed due to technological challenges and changes in OCIO mission priorities and requirements. Until the enforcement controls are fully implemented, NASA remains vulnerable to cybersecurity attacks.

Click link to read article: Federal Computer Week

Local PDF Copy of the Audit Report (fast download)
Inspector General Audit Report: AUDIT OF NASA’S POLICY AND PRACTICES REGARDING THE USE OF NON-AGENCY INFORMATION TECHNOLOGY DEVICES

External OIG Link
Inspector General Audit Report: AUDIT OF NASA’S POLICY AND PRACTICES REGARDING THE USE OF NON-AGENCY INFORMATION TECHNOLOGY DEVICES