Federal Reports

NASA missions are dependent on infrastructure, including testing facilities, laboratories, and launch pads, that face the threat of extreme weather events. To address weather-related vulnerabilities of its infrastructure, NASA has integrated resilience efforts into existing processes across various Agency programs. However, this approach lacks clear communication and formal guidance, and the Agency is not effectively tracking or measuring the success of its efforts to address weather-related risks.

Our objective was to evaluate the effectiveness of the Defense Intelligence Agency’s (DIA’s) overall information security program based on DIA’s implementation of the Federal Information Security Modernization Act. We issued our results in a classified report on August 4, 2025.

The audit objectives were to determine whether program funds were managed in accordance with the ARC and Federal grant requirements.

The OIG found approximately half of the DNFSB’s planned Review Agendas for Fiscal Years 2019 through 2024 were carryovers from prior years.  Some of these carryover reviews were delayed, and in those cases, justifications for delays were not consistently recorded.  Moreover, the OIG found that the DNFSB does not have a structured Knowledge Management Program, and DNFSB Review Agenda guidance is not aligned with its current process.

The report contains three recommendations to update and improve the agency’s Review Agenda process.