G-02-018
Assessment of Information Technology Security Vulnerabilities
at a NASA Installation

(January 28, 2003)


EXECUTIVE SUMMARY

The Office of Inspector General (OIG) completed an assessment of information technology security (ITS) vulnerabilities at a NASA Installation. Our objectives were to determine the security and functionality of the installation's network infrastructure, to evaluate the efficacy of the installation' ITS-related policies and procedures, and to assess the presence of suspicious traffic patterns on the Ames computer network and the information technology (IT) staff's awareness of and response to such network traffic.

NASA management concurred with all eight of our recommendations to further enhance ITS at the installation.

This report contains information that is not releasable to the general public.


Rev. February 6, 2002