Cybersecurity: NASA Needs to Fully Implement Risk Management

Excerpt:  “NASA plans to invest about $80 billion in its major projects to continue exploring Earth, the moon, and the solar system. NASA’s cybersecurity risk management program is a set of steps it should take to protect systems and information when developing these projects. Each step comprises a set of related tasks. NASA completed at least some cybersecurity tasks in each program step for all the projects we reviewed. But some of the tasks that haven’t been done are important. For example, NASA didn’t do an agency-wide risk assessment, which would allow it to prioritize cyber threats and mitigate the highest risks. We made recommendations to help.”