Vulnerability Disclosure

If you wish to report a vulnerability, please see the NASA Vulnerability Policy.

NASA Policy Directives (NPD) and NASA Procedural Requirements (NPR)

NASA Policy Directives and Procedural Requirements related to Information Security and Cybersecurity at NASA can be accessed via the NASA Online Directives Information System (NODIS). Please be advised that the NODIS search engine only allows keywords and directive 4-digit class number (e.g., 1000.1A) searches.

NASA Specifications and Standards

NASA Specifications and Standards related to Information Security and Cybersecurity at NASA can be accessed via the NASA Technical Standards System (NTSS).

Handbooks

Handbooks related to Information Security and Cybersecurity at NASA can be accessed via the Cybersecurity Standards and Engineering Team website (CSET). (NASA access only)

Cybersecurity Policy Reference (formerly ADL)

Questions

Questions regarding the applicability of these or other documents to a specific contract should be directed to the appropriate contracting officer.

General questions may be directed to the CSPD Policy Team.