Evaluation of NASA’s Information Security Program under the Federal Information Security Modernization Act for Fiscal Year 2024

The Office of Inspector General (OIG) is required to evaluate NASA’s information security program pursuant to the Federal Information Security Modernization Act of 2014 (FISMA). The OIG rated NASA’s information security program at a Level 3 (Consistently Implemented), which means policies, procedures, and strategies were consistently implemented, but quantitative and qualitative effectiveness measures were lacking.