NASA’s cybersecurity risk management program requires key activities to better protect its space systems, according to the GAO. The report highlights gaps in risk assessment and continuous monitoring strategies, posing increased threats to NASA’s missions. #NASA #GAO #CyberRiskManagement
Keypoints
- NASA is failing to perform comprehensive organization-wide cybersecurity risk assessments.
- The agency has not documented system-level continuous monitoring strategies for its space systems.
- Without these activities, there is an increased risk of data breaches and delayed threat detection.
- GAO recommends 16 actions to improve NASA’s cybersecurity posture, including updating risk management guidance.
- Effective risk management is vital for safeguarding NASA’s mission data and space system capabilities.
Read More: https://www.securityweek.com/nasa-needs-agency-wide-cybersecurity-risk-assessment-gao/