United States Department of State Office of Inspector General

You are subscribed to Reports for Department of State OIG. Manage Subscriptions [ [link removed] ]


Targeted Review of the Bureau of Diplomatic Technology’s Cloud Services Program Management [ [link removed] ] 06/13/2024 04:15 AM EDT

*Summary of Review *

OIG reviewed the Bureau of Information Resource Management’s (IRM)1 enterprise cloud computing services program management. The two primary enterprise cloud service providers in IRM are the Cloud Program Management Office (CPMO) and the Systems Integration Office (SIO). Together, the two offices offer seven enterprise-level2 (or enterprise) cloud services to help Department of State (Department) bureaus and offices efficiently and securely transition their systems and applications from on-premises data centers to modernized cloud environments, in accordance with IRM’s stated goal of enabling modernization. Due to the self-service capabilities inherent in cloud computing environments and the ability to rapidly provision and release cloud resources with minimal management involvement, there are cost, configuration, and security control risks unique to cloud computing that organizations managing these environments must address. Through this review, OIG sought to determine whether (1) enterprise-level cloud systems complied with federal and Department security requirements; (2) CPMO and SIO implemented required product management and customer engagement processes and procedures; (3) IRM established internal controls to govern the use of enterprise cloud systems in the Department; and (4) enterprise cloud systems complied with federal and Department contracting and procurement requirements.  

OIG found IRM’s cloud computing policies and guidelines have not kept pace with the quickly evolving cloud computing landscape and the rollout of enterprise cloud services in the Department. OIG’s review determined IRM established processes and procedures to meet most federal and Department security requirements and to monitor and control costs associated with the enterprise cloud services. However, the policies and guidelines IRM established to govern the procurement, implementation, configuration, and use of cloud services in the Department were outdated and obsolete. Additionally, OIG found the customer engagement processes IRM used to promote awareness of the enterprise cloud services required improvement.  

This review includes 11 recommendations to improve IRM’s cloud services program management. In its comments on the draft review, the bureau concurred with all 11 recommendations. OIG considers all 11 recommendations resolved. The bureau’s response to each recommendation and OIG’s reply can be found in the Recommendations section of this review. The bureau’s formal written response is reprinted in its entirety in Appendix B.   

 

1 In May 2024, after OIG issued the draft targeted review, the Department changed the name of the bureau to the Bureau of Diplomatic Technology (DT). Throughout this targeted review, except for the report title and recommendations, the bureau is still referred to as IRM. 

2 An enterprise-level service is defined as a solution designed to integrate multiple facets of an organization’s business.

body { font-size: 1em; font-family: Arial, Verdana, sans-serif; font-weight: normal; font-style: normal; color: #333333; }






Stay connected with the Department of State OIG:

The Great Seal [ [link removed] ] Twitter [ [link removed] ]RSS Feed [ [link removed] ]Linkedin Icon [ [link removed] ]

________________________________________________________________________

External links found in this content or on Department of State OIG websites that go to other non-Department websites should not be construed as an endorsement of the views or privacy policies contained therein. 

Update your subscriptions, modify your password or email address, or stop subscriptions at any time on your Subscriber Preferences Page [ [link removed] ]. You will need to use your email address to log in. If you have questions or problems with the subscription service, please contact subscriberhelp.govdelivery.com [ [link removed] ].





/*start reset css*/ div { line-height: 1; } body, table, td, p, a, li, blockquote { -webkit-text-size-adjust: 100%; -ms-text-size-adjust: 100%; } body { -webkit-text-size-adjust: none; -ms-text-size-adjust: none; } table { border-spacing: 0; } table, td { mso-table-lspace: 0pt; mso-table-rspace: 0pt; } img { -ms-interpolation-mode: bicubic; } body { margin: 0; padding: 0; } img { border: none !important; height: auto; line-height: 1; outline: none; text-decoration: none; } table td { border-collapse: collapse !important; } .preheader { display: none !important; visibility: hidden; opacity: 0; color: transparent; height: 0; width: 0; } /*end reset css*/ a[x-apple-data-detectors] { color: inherit !important; text-decoration: none !important; font-size: inherit !important; font-family: inherit !important; font-weight: inherit !important; line-height: inherit !important; } /* Sets the line height in everything but Outlook */ table#yahoo body, table#yahoo p, table#yahoo .gd_p, table#yahoo p span, table#yahoo li, table#yahoo li span { line-height: 1.4; } /* outlook.com line-height control */ .ExternalClass p, .ExternalClass span, .ExternalClass font, .ExternalClass td {line-height: 100%} table#yahoo .govd_template_image { max-width: 100% !important; max-width:100%; } table#yahoo .govd_template_image, table#yahoo .govd_template_image img { height:auto !important; height:auto; } /* Fixed Outlookdotcom and Outlook360 not supporting Hspace - HT 2-12-2020 */ table#yahoo .gd_combo_table img {margin-left:7px; margin-right:7px;} table#yahoo .gd_combo_table td.gd_combo_image_cell img, table#yahoo .gd_combo_table div.govd_image_display img {margin-left:0px; margin-right:0px;} @media only screen and (max-device-width: 480px) { table#yahoo, table#yahoo table { position: relative; } table#yahoo .govd_header { max-width: 480px !important; } table#yahoo .govd_hr img, table#yahoo .govd_hr_inner img { display:none !important; } table#yahoo img { max-width: 100% !important; width: auto !important; } table#yahoo .govd_template_image { height: auto !important; max-width: 100% !important; width: auto !important; margin:0 !important; } table#yahoo table.gd_combo_table .govd_template_image { margin:0 auto 10px auto !important; display:block !important; float:none !important; text-align:center; } table#yahoo table.gd_combo_table td.gd_combo_image_cell .govd_template_image { margin:0 !important; text-align:left; } table#yahoo #main-header .govd_template_image { max-width: 480px !important; width: 100% !important; } table#yahoo .govd_content_container .govd_image_display { margin-left:0 !important; } table#yahoo .container-fill, table.gd_tbl_wrap, table.gd_tbl_wrap table { max-width: 480px !important; } .main-table, .mobile-footer, .mobile-tagline, table.gd_tbl_wrap, table.gd_tbl_wrap table { width:100% !important; min-width:100% !important; max-width:480px !important; } table#yahoo .tablecell, .tablecell { width:100% !important; display: block !important; max-width:100% !important; min-width: 100% !important; } table#yahoo #main-body .govd_hr {background:transparent none !important;} .mobile-hide {display:none !important;} .mobile-padding {padding:0 !important;} .mobile-columns {padding:10px 20px !important;} } div.rss_item {line-height: 1.4; color: #000000; font-family: arial, helvetica, sans-serif; font-size: 14px; text-align: left;} div.rss_item .rss_title {margin-top: 0; margin-bottom: 15px; line-height: 1.1; font-weight: bold; color: #1a4480; font-family: arial, helvetica, sans-serif; font-size: 23px; text-align: left;} div.rss_item .rss_title a {font-weight: bold; color: #1a4480; font-family: arial, helvetica, sans-serif; font-size: 23px; text-align: left; text-decoration: none;} div.rss_item .rss_pub_date {line-height: 1.4; color: #555555; font-family: arial, helvetica, sans-serif; font-size: 12px; text-align: left;} div.rss_item .rss_description {line-height: 1.4; color: #000000; font-family: arial, helvetica, sans-serif; font-size: 14px; text-align: left;}

________________________________________________________________________

This email was sent to [email protected] using GovDelivery Communications Cloud on behalf of: Department of State OIG · 2201 C Street NW · Washington, DC 20520 GovDelivery logo [ [link removed] ]