Purpose

This NASA Procedures and Guidelines (NPG) implements the NASA Policy Directive (NPD) 2810, Security of Information Technology. The NPG describes the NASA IT Security Program, providing direction designed to ensure that safeguards for the protection of the integrity, availability, and confidentiality of IT resources (e.g., data, information, applications, and systems) are integrated into and support the missions of NASA.

Applicability

This NPG document applies to all NASA contracts (as provided by the terms and conditions of the contract), where appropriate in achieving Agency missions, programs, projects, and institutional requirements. Facilities, resources, and personnel under a contract or grant from NASA at a college, university, or research establishment are included in the applicability of this document to the extent prescribed by the contract, grant, or cooperative agreement.