2.3: Culture
Nurture a culture of security awareness that improves the accountability of IT resources and “bakes” security into IT solutions
and everyday work habits.
Other Information:
Security is an ‘everyone’ responsibility. Information technology stakeholders require the appropriate awareness, tools, and
resources needed to identify and effectively manage IT security risks and controls. To achieve this target environment, IT
security policy, guidance, and training must be flexible to support our current and future mission needs while providing the
adaptability necessary to address and protect NASA’s IT assets from the increasingly dynamic information security threats.
Indicator(s):
|
