scope:

This directive is intended for use and reference by all Marshall Space Flight Center (MSFC) civil service and contractor employees who have access to MSFC Information Technology (IT) resources. It provides direction designed to ensure that safeguards for the protection of the integrity, availability, and confidentiality of IT resources, including data, information, applications, and systems, are integrated into and support the missions of NASA. It is specifically designed to assist those with assigned IT security responsibilities to adequately fulfill those responsibilities.

APPLICABILITY. This document applies to all MSFC facilities, employees, and contractors (as provided by law or contract), where appropriate, in achieving MSFC missions, programs, projects, and institutional requirements.

These requirements apply to any MSFC outsourced IT resources, whether outsourced to another NASA Center, another Government Agency, or a commercial facility.

Facilities, resources, and personnel under a contract or grant from MSFC, whether onsite or at a college, university, or research establishment, are included in the applicability of this document to the extent prescribed by the contract or grant.