Cybersecurity remains one of NASA’s top management challenges. While NASA’s information security program maintained a Level 3 rating this year, it still falls short of what the Office of Management and Budget considers effective.
Open Recommendations
| Recommendation Number | Significant Recommendation | Recommended Questioned Costs | Recommended Funds for Better Use | Additional Details | |
|---|---|---|---|---|---|
| 20 | No | $0 | $0 | ||
| Continue its efforts to prioritize projects that address the complexities required across EL tiers to meet the intermediate (EL2) maturity level in accordance with OMB M-21-31. | |||||
| 11 | No | $0 | $0 | ||
| Continue to implement the necessary entity-wide oversight to improve enforcement mechanisms and controls to ensure all standard baselines and vulnerabilities are monitored and remediated in accordance with Federal and Agency requirements. | |||||