Arkansas Legal Resource Navigator

42 U.S.C. § 18302 — Information security

Federal law — U.S. Code and appendices · legal_authorities

42 U.S.C. § 18302 — Information security

**(a) Monitoring risk** (1) **Update on system implementation** — Not later than 120 days after October 11, 2010, and on a biennial basis thereafter, the chief information officer of NASA, in coordination with other national security agencies, shall provide to the appropriate committees of Congress— (A) an update on efforts to implement a system to provide dynamic, comprehensive, real-time information regarding risk of unauthorized remote, proximity, and insider use or access, for all information infrastructure under the responsibility of the chief information officer, and mission-related networks, including contractor networks; (B) an assessment of whether the system has demonstrably and quantifiably reduced network risk compared to alternative methods of measuring security; and (C) an assessment of the progress that each center and facility has made toward implementing the system. (2) **Existing assessments** — The assessments required of the Inspector General under section 3545 11 See References in Text note below. of title 44 shall evaluate the effectiveness of the system described in this subsection. **(b) Information security awareness and education** (1) **In general** — In consultation with the Department of Education, other national security agencies, and other agency directorates, the chief information officer shall institute an information security awareness and education program for all operators and users of NASA information infrastructure, with the goal of reducing unauthorized remote, proximity, and insider use or access. (2) **Program requirements** (A) The program shall include, at a minimum, ongoing classified and unclassified threat-based briefings, and automated exercises and examinations that simulate common attack techniques. (B

Source: Supplied U.S. Code snapshot — release unconfirmed · 42 U.S.C. § 18302

Stored review status: release_metadata_unconfirmed. A text match is a research starting point; applicability is not established.

Original supplied file — preserved unchanged

Download original Markdown file

File SHA-256: ab92d9782e1f5b77dbe3c1c302f12fc2d8a682cc2e9fdae5d98e14a6c768f3c5. The original may include catalog metadata, neighboring provisions, or embedded records outside this collection's scope. Search shows only the selected federal record. Historical editions and unverified snapshots are not a statement of current law.

Authority boundary: historical or unconfirmed source not current law verified.

Open the recorded source website ↗

Record provenance

Stable record: federal_law:legal_authorities:record_usc_87f3f7e76460eec2795d01b6
Source file: Laws/federal/codes/united-states-code/title-42/section-18302-information-security--442c9dc575.md
Pages: Not recorded – Not recorded
Passage SHA-256: 7d9db9275a8793f5e9fc5bc5bc436c7b300fd18b4abcce0ff65076232e17171e

Source location: Title 42, Chapter 159, § 18302; chapter-159-space-exploration-technology-and-science.md

Stored source content

**(a) Monitoring risk** (1) **Update on system implementation** — Not later than 120 days after October 11, 2010, and on a biennial basis thereafter, the chief information officer of NASA, in coordination with other national security agencies, shall provide to the appropriate committees of Congress— (A) an update on efforts to implement a system to provide dynamic, comprehensive, real-time information regarding risk of unauthorized remote, proximity, and insider use or access, for all information infrastructure under the responsibility of the chief information officer, and mission-related networks, including contractor networks; (B) an assessment of whether the system has demonstrably and quantifiably reduced network risk compared to alternative methods of measuring security; and (C) an assessment of the progress that each center and facility has made toward implementing the system. (2) **Existing assessments** — The assessments required of the Inspector General under section 3545 11 See References in Text note below. of title 44 shall evaluate the effectiveness of the system described in this subsection. **(b) Information security awareness and education** (1) **In general** — In consultation with the Department of Education, other national security agencies, and other agency directorates, the chief information officer shall institute an information security awareness and education program for all operators and users of NASA information infrastructure, with the goal of reducing unauthorized remote, proximity, and insider use or access. (2) **Program requirements** (A) The program shall include, at a minimum, ongoing classified and unclassified threat-based briefings, and automated exercises and examinations that simulate common attack techniques. (B) All agency employees and contractors engaged in the operation or use of agency information infrastructure shall participate in the program. (C) Access to NASA information infrastructure shall only be granted to operators and users who regularly satisfy the requirements of the program. (D) The chief human capital officer of NASA, in consultation with the chief information officer, shall create a system to reward operators and users of agency information infrastructure for continuous high achievement in the program. **(c) Information infrastructure defined** In this section, the term “information infrastructure” means the underlying framework that information systems and assets rely on to process, transmit, receive, or store information electronically, including programmable electronic devices and communications networks and any associated hardware, software, or data.

Cross-references

Connections may be documented source relationships, shared citations or nearby passages. Each explains its basis; a connection alone does not establish applicability to your situation.

Federal law — U.S. Code and appendices · legal_authorities

44 U.S.C. § 3555 — Annual independent evaluation

**(a) In General.—** (1) Each year each agency shall have performed an independent evaluation of the information security program and practices of that agency to determine the effectiveness of such program and practices. (2) Each evaluation under this section shall include— (A) testing of the effectiveness of information security policies, procedures, and practices of a representative subset of the agency’s information systems; (B) an assessment of the effectiveness of the information security policies, procedures, and practices of the agency; and (C) separate presentations, as appropriate, regarding information security relating to national security systems. **(b) Independent Auditor.—** Subject to subsection (c)— (1) for each agency with an Inspector General appointed under chapter 4 of title 5, the annual evaluation required by this section shall be performed by the Inspector General or by an independent external auditor, as determined by the Inspector General of the agency; and (2) for each agency to which paragraph (1) does not apply, the head of the agency shall engage an independent external auditor to perform the evaluation. **(c) National Security Systems.—** For each agency operating or exercising control of a national security system, that portion of the evaluation required by this section directly relating to a national security system shall be performed— (1) only by an entity designated by the agency head; and (2) in such a manner as to ensure appropriate protection for information associated with any information security vulnerability in such system commensurate with the risk and in accordance with all applicable laws. **(d) Existing Evaluations.—** The evaluation required by this section may be based in whole or in part on an audit, eval

Source: Supplied U.S. Code snapshot — release unconfirmed · 44 U.S.C. § 3555

Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.

Federal law — U.S. Code and appendices · legal_authorities

51 U.S.C. § 10101 — Definitions

In this title: (1) **Administration.—** — The term “Administration” means the National Aeronautics and Space Administration. (2) **Administrator.—** — The term “Administrator” means the Administrator of the National Aeronautics and Space Administration.

Source: Supplied U.S. Code snapshot — release unconfirmed · 51 U.S.C. § 10101

Stored review status: release_metadata_unconfirmed. Incoming connection: Explicit cross-reference supplied in source Markdown; currentness and applicability require review.

Federal law — U.S. Code and appendices · legal_authorities

51 U.S.C. § 20302 — Vision for space exploration

**(a) In General.—** The Administrator shall establish a program to develop a sustained human presence in cis-lunar space or on the Moon, including a robust precursor program, to promote exploration, science, commerce, and United States preeminence in space, and as a stepping-stone to future exploration of Mars and other destinations. The Administrator is further authorized to develop and conduct appropriate international collaborations in pursuit of these goals. **(b) Future Exploration of Mars.—** The Administrator shall manage human space flight programs, including the Space Launch System and Orion, to enable humans to explore Mars and other destinations by defining a series of sustainable steps and conducting mission planning, research, and technology development on a timetable that is technically and fiscally possible, consistent with section 70504. **(c) Definitions.—** In this section: (1) **Orion.—** — The term “Orion” means the multipurpose crew vehicle described under section 303 of the National Aeronautics and Space Administration Authorization Act of 2010 ([42 U.S.C. 18323](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title42-section18323&num=0&edition=prelim)). (2) **Space launch system.—** — The term “Space Launch System” means has the meaning 11 So in original. given the term in section 3 of the National Aeronautics and Space Administration Authorization Act of 2010 ([42 U.S.C. 18302](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title42-section18302&num=0&edition=prelim)).

Source: Supplied U.S. Code snapshot — release unconfirmed · 51 U.S.C. § 20302

Stored review status: release_metadata_unconfirmed. Incoming connection: Explicit cross-reference supplied in source Markdown; currentness and applicability require review.

Federal law — U.S. Code and appendices · legal_authorities

42 U.S.C. § 18302 — Definitions

Page 9147 TITLE 42—THE PUBLIC HEALTH AND WELFARE § 18311 1 So in original. Probably should be followed by ‘‘and Tech- nology’’. stated in chapters 305 (§ 30501 et seq.), 401 (§ 40101 et seq.), 603 (§ 60301 et seq.) and 707 (§ 70701 et seq.) and sec- tions 20301, 20302, 30103(a), (b), 30104, 30306, 30703, 30704, 30902, 31301, 31501, 40701, 40904 to 40909, 50505, 50116, 60505, 70501 to 70503, and 70902 to 70905 of Title 51, National and Commercial Space Programs, by Pub. L. 111–314, §§ 3, 6, Dec. 18, 2010, 124 Stat. 3328, 3444. For complete classi- fication of this Act to the Code, see Short Title of 2005 Act note set out under section 10101 of Title 51 and Ta- bles. The National Aeronautics and Space Administration Authorization Act of 2008, referred to in pars. (10) and (12), is Pub. L. 110–422, Oct. 15, 2008, 122 Stat. 4779, which was classified principally to chapter 155 (§ 17701 et seq.) of this title, and was substantially repealed and re- stated as chapters 711 (§ 71101 et seq.) and 713 (§ 71301 et seq.) and sections 20305, 30305, 30310, 31302, 31502 to 31505, 40104, 40311, 40702 to 40704, 40903(d), 50111(b), 60501 to 60504, 60506, 70504 to 70508, 70906, and 70907 of Title 51, National and Commercial Space Programs, by Pub. L. 111–314, §§ 3, 6, Dec. 18, 2010, 124 Stat. 3328, 3444. For com- plete classification of this Act to the Code, see Short Title of 2008 Act note set out under section 10101 of Title 51 and Tables. Statutory Notes and Related Subsidiaries SHORT TITLE Pub. L. 111–267, § 1(a), Oct. 11, 2010, 124 Stat. 2805, pro- vided that: ‘‘This Act [enacting this chapter] may be cited as the ‘National Aeronautics and Space Adminis- tration Authorization Act of 2010’.’’ § 18302. Definitions In this chapter: (1) Administrator The term ‘‘A

Source: Supplied 2024 U.S. Code historical extraction · 42 U.S.C. § 18302

Stored review status: historical_2024_not_currentness_verified. Same stored citation; legal effect and authority still require review.