Not all networks can hear the centralized SOC
Although NASA stood up a security operations center in November 2008 to centrally manage the detection and response to cyber attacks, that center does not currently monitor all NASA networks, says the agency’s office of inspector general.
In a one-sheet summary (.pdf) of a restricted report, the NASA OIG says that the networks not incorporated into the central SOC aren’t unprotected, since dedicated staff respond to incidents occurring within them and monitor for threats. But, they lack the centralized continuous monitoring coverage afforded by the SOC.
Before consolidation in November, NASA centers typically were responsible for their own cybersecurity. The SOC is located at the Ames Research Center, near Moffett Field, Calif.