Pub. L. 115-10, tit. VIII, subtit. A, sec. 815 (as amended)
CYBERSECURITY OF WEB APPLICATIONS.
SEC. 815. CYBERSECURITY OF WEB APPLICATIONS.
Not later than 180 days after the date of enactment of this Act, the Administrator shall, in a manner that reflects the unique nature of NASA’s mission and expertise—
(1) develop a plan, including such actions and milestones as are necessary, to fully remediate security vulnerabilities of NASA web applications within a timely fashion after discovery; and
(2) provide an update on its plan to implement the recommendation from the NASA Inspector General in the audit report dated July 10, 2014, (IG-14-023) to remove from the Internet or otherwise secure all NASA web applications in development or testing mode.