NASA Federal Information Security Modernization Act of 2014 Evaluation Report for Fiscal Year 2022

The Federal Information Security Modernization Act of 2014 requires the OIG to conduct an annual evaluation of NASA’s information security program. In this year’s review, we examined a sample of NASA- and contractor-owned information systems and assessed the effectiveness of information security policies, procedures, standards, and guidelines against the required metrics.