NASA Struggles to Fix Network Security Holes - 'ZIFFPAGE TITLEDAY 3'

DAY 3: Conclusions

By Wednesday morning, I've written a draft of the panel's findings for the other members to review, but we're still not quite through with the presentations.

Ing gives us an overview of the $33 million project budget and how the original request for 15 project managers to oversee the implementation at each location was trimmed to 4.5 full-time equivalents (or about 15 people spending a third of their time on this). It's not news to anyone in the room that budgets have to be stretched, though. "The reality is, reality is no fun," Hevey says.

What worries the center CIOs more are the costs not shown on Ing's budget slides, such as the expense of integrating applications with the NISE architecture. The project engineers don't think it will be that hard to do a well-designed Web application—perhaps a couple of months of work per application in the beginning, down to one month once the developers gain experience with the process. Hevey says his own staff's estimate was "about a man-year," meaning the equivalent of one person's full-time labor for a year.

After a lunch discussion among the panel members, we present our findings (see "A Better Launch Pad," p. 56).One of the most important is the need to analyze the gap between how the project is actually being managed and NASA's official project management process.

We also recommend that a configuration control board, an ongoing panel to review systems configuration changes, needs to be created immediately for the critical account management system. The project to create a new security badge system already has one of these change management oversight boards in place, which the account management project would do well to imitate.

We run down the list of findings, with Greenwood doing most of the talking. Santiago and Ing thank us for our participation, and we go home. As the meeting is breaking up, I overhear one of the NASA people asking Ing what's next for the project. "Didn't you hear?" she asks, in a tone of good-natured grumbling. "Now I've got all this documentation I've got to redo."