NASA Office of Inspector General. As needed, the OIG may be called upon to provide insights into criminal activity or render opinions on how best to proceed on various issues in order to maintain alignment with OIG guidelines. Community and Media Relations Office. The following categories of incidents are described in NPG2810 and will be used identify security breaches. Resources, such as power, network access, or routing tables, are deliberately modified to cause a system to not be able to perform its normal functions.
Malicious code interferes with a system to a significant degree.
Assets have been physically taken or destroyed, but no password files, protected or restricted data, applications, restricted software, or code was compromised. A weakness in the system is successfully exploited and is successfully used to gain access to password files, data, applications, or accounts that are protected or restricted, but access is not gained to accounts with system privileges. The physical theft of assets provides access to password files, protected or restricted data, licensed applications or software, or restricted applications, software, or code. Exploits are run against a system that would, if successful, have impaired the system's ability to perform its normal functions. Illicit information gathering or attempted gathering is directed against one or more systems.