Pub. L. 115-10, tit. VIII, subtit. A, sec. 815
CYBERSECURITY OF WEB APPLICATIONS.
SEC. 815. CYBERSECURITY OF WEB APPLICATIONS. Not later than 180 days after the date of enactment of this Act, the Administrator shall, in a manner that reflects the unique nature of NASA’s mission and expertise—(1) develop a plan, including such actions and milestones as are necessary, to fully remediate security vulnerabilities of NASA web applications within a timely fashion after discovery; and(2) provide an update on its plan to implement the recommendation from the NASA Inspector General in the audit report dated July 10, 2014, (IG–14–023) to remove from the Internet or otherwise secure all NASA web applications in development or testing mode.