Sec. 705. Cybersecurity
232 words·~1 min read·
/bill/115/s/3799/is/section-705·A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
Section 20301 of title 51 is amended by adding at the end the following: The Administrator shall update and improve, as necessary, the cybersecurity of the space assets and supporting infrastructure within the Administration’s domain. . The Administrator shall maintain a Security Operations Center to identify and respond to cybersecurity threats to NASA information technology systems, including, when appropriate, institutional systems and mission systems. Not later than 18 months after the date of enactment of this Act, in carrying out paragraph (1), the Administrator shall implement each of the recommendations of the Inspector General of NASA in the report issued May 23, 2018 (IG–18–020), including the following:
Developing a charter and set of authorities approved by the Administrator that addresses the Security Operation’s Center organizational placement, purpose, authority, and responsibilities. Establishing Operational Level Agreements with NASA Centers, Mission Directorates, and other divisions to direct the roles and data visibility Administration-wide. Developing initiatives to improve Administration-wide visibility. Identifying and reducing unnecessary duplication to incident monitoring, detection, and response capabilities.
Not later than 18 months after the date of enactment of this Act, the Administrator shall implement the priority recommendations of the Comptroller General of the United States in the report issued May 18, 2016 (GAO–16–501), pertaining to information security controls over select high-impact systems, including— re-evaluating security control assessments; and specifying metrics to be used as part of the Administration's continuous monitoring strategy.