REG NASA-LLIS-1448--2003 Lessons Learned - Accident Investigations Information Technology and Database Security.pdf

《REG NASA-LLIS-1448--2003 Lessons Learned - Accident Investigations Information Technology and Database Security.pdf》由会员分享，可在线阅读，更多相关《REG NASA-LLIS-1448--2003 Lessons Learned - Accident Investigations Information Technology and Database Security.pdf（2页珍藏版）》请在麦多课文档分享上搜索。

1、Lessons Learned Entry: 1448Lesson Info:a71 Lesson Number: 1448a71 Lesson Date: 2003-08-31a71 Submitting Organization: JSCa71 Submitted by: David LengyelSubject: Accident Investigations/Information Technology and Database Security Abstract: Different software tools with differing access protocols cau

2、sed inefficiencies. Electronic investigation tools should have secure, automated, user-friendly access.Description of Driving Event: For the Columbia accident investigation, different database and accident investigation software tools had differing access security protocols causing inefficient use b

3、y investigators and support teams.Lesson(s) Learned: Electronic tools used for accident investigations should have a secure, automated, user-friendly access system.Recommendation(s): a71 Do not allow computer connectivity and cross-platform issues to prevent efficient access between dispersed member

4、s.a71 Identify a single authority to integrate and manage security systems and make sure they are compatible. Security systems should also have a checkout process to facilitate exit/rotation of Board support staff.a71 Maximize use of COTS tools to enhance product support and rapid startup.a71 Prohib

5、it use of proprietary, non-NASA email systems while assigned to the investigation (e.g. Earthlink, MSMail).a71 Identify which tools will contain ITAR data and, therefore, require 2-factor security.a71 Define the Boards Security Policy upfront - some incidents may require more security than Provided

6、by IHSNot for ResaleNo reproduction or networking permitted without license from IHS-,-,-others.a71 Make the security access tool web enabled with sufficient security protection so that investigators and Board members can have remote access without being at the Board office. Evidence of Recurrence C

7、ontrol Effectiveness: TBD NASA ResponseDocuments Related to Lesson: Agency Contingency Action Plan for Space Flight OperationsMission Directorate(s): a71 Space Operationsa71 Exploration SystemsAdditional Key Phrase(s): a71 Accident Investigationa71 Administration/Organizationa71 Computersa71 Configu

8、ration Managementa71 Information Technology/Systemsa71 NASA Standardsa71 Policy & Planninga71 Safety & Mission Assurancea71 SecurityAdditional Info: Approval Info: a71 Approval Date: 2004-06-16a71 Approval Name: Ronald Montaguea71 Approval Organization: JSCa71 Approval Phone Number: 281-483-8576Provided by IHSNot for ResaleNo reproduction or networking permitted without license from IHS-,-,-