Subject: NASA Enterprise Protection Program (w/Change 1)

Responsible Office: Associate Administrator

Preface

P.1 Purpose

This NPR establishes the responsibilities and requirements of the Principal Advisor for Enterprise Protection (PAEP), the Enterprise Protection Program (EPP), and the Enterprise Protection Board (EPB).

P.2 Applicability

a. This directive is applicable to NASA Headquarters and NASA Centers, including Component Facilities, Technical and Service Support Centers.

b. This directive applies to all NASA space and aeronautical flight programs and projects, including spacecraft, launch vehicles, aircraft, and instruments developed for flight programs and projects; research and technology projects funded by and to be incorporated into space or aeronautical flight programs and projects; critical technical facilities specifically developed or significantly modified for space or aeronautical flight systems; mission operations systems; and communications systems. Applicability of this directive to reimbursable space and aeronautical flight programs, projects performed for non-NASA sponsors, and to NASA contributions to space flight programs and projects with international and interagency partners will be determined via negotiations with the sponsors/partners.

c. This directive may be applied to other NASA investments at the discretion of the NASA Associate Administrator.

d. In this directive, all mandatory actions (i.e., requirements) are denoted by statements containing the term "shall." The terms "may" or "can" denote discretionary privilege or permission, "should" denotes a good practice and is recommended but not required, "will" denotes expected outcome, and "are/is" denotes descriptive material.

e. In this directive, all document citations are assumed to be the latest version unless otherwise noted.

P.3 Authority

a. National Aeronautics and Space Act, 51 U.S.C. §§20113, 20132.

b. Clinger-Cohen Act of 1996, Pub.L. 104-106, 110 Stat. 642, 679 (1996).

c. NPD 1000.0, NASA Governance and Strategic Management Handbook.

d. NPD 1000.3, The NASA Organization.

e. Memorandum from the NASA Associate Administrator to Officials-in-Charge of Headquarters Offices and Directors, NASA Centers, Establishing the Position of Principal Advisor for Enterprise Protection, dated August 18, 2016.

f. Presidential Policy Directive 4: National Space Policy of the United States of America.

g. Presidential Policy Directive 21: Critical Infrastructure Security and Resilience.

P.4 Applicable Documents and Forms

NASA-STD-1006, Space System Protection Standard.

P.5 Measurement/Verification

Compliance with this directive is verified through oversight by the Agency Program Management Council (APMC) and NASA internal controls described in NPD 1200.1. Special audits are performed per NPD 1000.0.

P.6 Cancellation

DISTRIBUTION:
NODIS

This document does not bind the public, except as authorized by law or as incorporated into a contract. This document is uncontrolled when printed. Check the NASA Online Directives Information System (NODIS) Library to verify that this is the correct version before use: https://nodis3.gsfc.nasa.gov.