The list expanded from three challenge areas to four
The National Science Foundation inspector general's fiscal-year 2027 management-challenges report identifies four areas: changes in award-making, the U.S. Antarctic Program, information-technology management and research security. The fiscal-year 2026 report identified three—grant-making changes, Antarctica and research security.
The direct year-over-year change is therefore the addition of IT management as a separately named challenge. A management challenge is a risk designation, not a finding that a breach occurred or that every technology program is ineffective.
| Area | FY 2026 | FY 2027 |
|---|---|---|
| Award-making changes | Yes | Yes |
| Antarctic Program | Yes | Yes |
| Research security | Yes | Yes |
| IT management | No separate listing | Yes |
Three long-running risks remained
Award-making changes can affect how quickly and consistently billions of research dollars are reviewed. Antarctic operations combine remote logistics, safety and aging infrastructure. Research security requires the agency to protect federally funded work without treating international collaboration itself as wrongdoing.
Their continued appearance means the inspector general still considers them significant. It does not show that conditions worsened in each area, because the challenge document is not a scored trend index.
The added IT label creates a measurable oversight question
Separately naming IT management should make future accountability more visible. Congress and the public can compare system inventories, modernization milestones, cybersecurity findings and closed recommendations against the 2027 designation.
The meaningful test is not whether IT disappears from next year's title. It is whether the foundation documents durable improvements and whether the inspector general explains why residual risk has changed.
Method and limits
What's the Scoop With Broach compared the official fiscal-year 2026 and 2027 challenge lists line by line. The article reports the one categorical addition and avoids converting a qualitative watchdog judgment into a numerical failure score.
The comparison cannot establish when a specific IT weakness began, how much it costs or whether a cyber incident occurred. Those questions require the underlying audits and agency response records.
Sources and further reading
NSF OIG, Management Challenges for FY 2027 ↗