NASA’s Cybersecurity Gaps Could Put $80 Billion in Missions at Risk

As NASA advances its $80 billion investment in space exploration projects, a new federal report warns that key cybersecurity shortcomings could leave the agency vulnerable to data breaches and potential disruptions in mission-critical systems. The Government Accountability Office (GAO) found that while NASA has taken some steps to safeguard its digital infrastructure, it has not fully implemented essential risk management procedures.

The GAO evaluated four major NASA systems and found that each had only partially implemented most of the seven foundational steps of a cybersecurity risk management framework. These include preparing an organization-wide risk assessment, selecting and implementing controls, and establishing ongoing monitoring practices. Notably, NASA had not completed a comprehensive, agency-wide cybersecurity risk assessment, a crucial step in identifying and prioritizing threats across its portfolio.

Among the deficiencies, the agency lacked clear strategies for continuously monitoring system security—leaving systems more susceptible to delayed threat detection and slow response times. Without consistent oversight and documentation, NASA’s systems may be exposed to cyber incidents that compromise mission data or reduce the operational lifespan of costly spacecraft and support systems.

To address these concerns, the GAO issued 16 specific recommendations. These include directives to the NASA Chief Information Officer to approve an agency-wide risk assessment, refine monitoring guidance, and ensure that unresolved critical security issues are addressed with documented risk levels and remediation timelines. NASA has agreed to some of the recommendations, partially agreed to others, and rejected five, although the GAO maintains that all actions are necessary to protect national space interests.

The public version of the report comes amid heightened awareness of cybersecurity risks in federal systems. If unaddressed, the gaps identified in the report could not only delay NASA’s future missions but also increase the risk of compromised scientific data and disrupted operations.

Article by multiple contributors, based upon information from a GAO press release (GAO-25-108138), U.S. Government Accountability Office

---