NASA Needs Better Cloud Computing Strategy for Public Contracts According to Audit
July 30, 2013 2:24 PM
comment(s) - last by
A NASA audit found that stock vendor contracts and lack of oversight are exposing it to potential security threats
An audit of NASA's public cloud computing contracts recently found that the space agency isn't meeting federal IT security requirements.
The NASA Office of Inspector General (OIG) recently audited the space agency's public cloud computing system and found that a combination of stock vendor contracts and lack of oversight are exposing it to
potential security threats
The OIG reviewed five NASA contracts in the audit, where four relied on the cloud providers' standard contracts and one was made by NASA. All five failed to meet "federal privacy, discovery, and data retention and destruction requirements" according to
In addition, the OIG found that a third-party cloud service that sends over 100 NASA internal and public websites had been operating without security plans or written authorization for more than two years.
To top it off, NASA's Office of the CIO wasn't clued in on all of the cloud services that different NASA organizations had used, and in many instances, the movement to public clouds was not planned through "a central office."
The OIG concluded that NASA's public cloud contracts are at increased risk of vulnerabilities and need to be addressed through a better-coordinated cloud strategy.
On the upside, moving to the cloud does save NASA about $1 million each year.
In 2012, NASA stopped using the Nebula private cloud and moved its data to Azure and Amazon Web Services. The audit, which only looked at a small portion of NASA's computer infrastructure, said up to 75 percent of new IT programs are expected to start in the cloud within five years, and almost all of NASA's public data could be moved to the cloud as well. As much as 40 percent of its legacy systems could go to the cloud, too.
This article is over a month old, voting and posting comments is disabled
7/30/2013 3:30:07 PM
When you say "NASA" and "cloud" in the same sentence, it can take on an entirely different meaning than "cloud" does with other companies... they are the National
and Space Administration, after all.
RE: Cloud computing
7/31/2013 4:34:49 AM
they are the National Aeronautics and Space
, after all.
"There is a single light of science, and to brighten it anywhere is to brighten it everywhere." -- Isaac Asimov
NASA's ISS Control Codes Were Stolen, IT Department Incapable of Patching PCs
March 1, 2012, 6:46 PM
Creationists are Mad About Google Doodle Depicting Evolution
November 24, 2015, 8:48 PM
DHS and TSA: Whoops, We Missed That 73 Airport Employees May be Terrorists
November 19, 2015, 2:16 PM
Star Wars Spinoff Film "Rogue One", Theme Park Attractions Announced
August 17, 2015, 12:20 PM
SpaceX Falcon 9's Seventh Supply Mission to ISS Ends w/ Fiery Stage 1 Explosion
June 28, 2015, 1:10 PM
Cool Science Video: Glowing Millipede Prowls the Nevada Desert
May 18, 2015, 12:00 PM
Newly Discovered Costa Rican Glass Frog is Kermit's Doppelgänger
April 22, 2015, 11:26 AM
Latest Blog Posts
Sceptre Airs 27", 120 Hz. 1080p Monitor/HDTV w/ 5 ms Response Time for $220
Dec 3, 2014, 10:32 PM
Costco Gives Employees Thanksgiving Off; Wal-Mart Leads "Black Thursday" Charge
Oct 29, 2014, 9:57 PM
"Bear Selfies" Fad Could Turn Deadly, Warn Nevada Wildlife Officials
Oct 28, 2014, 12:00 PM
The Surface Mini That Was Never Released Gets "Hands On" Treatment
Sep 26, 2014, 8:22 AM
ISIS Imposes Ban on Teaching Evolution in Iraq
Sep 17, 2014, 5:22 PM
More Blog Posts
Copyright 2016 DailyTech LLC. -
Terms, Conditions & Privacy Information