Targeted Review of the Bureau of Diplomatic Technology’s Cloud Services Program Management

Submitting OIG:

Department of State OIG

Date Issued:

Tuesday, June 11, 2024

Agency Reviewed / Investigated:

Department of State

Submitting OIG-Specific Report Number:

ISP-I-24-21

Component, if applicable:

Bureau of Information Resource Management

Location(s):

Agency-Wide

Type of Report:

Inspection / Evaluation

Questioned Costs:

Funds for Better Use:

Number of Recommendations:

Report updated under NDAA 5274:

View Document:

Attachment	Size
ISP-I-24-21.pdf	1.13 MB

Recommendation Number	Recommendation Status	Significant Recommendation
1	Open	No
The Bureau of Diplomatic Technology should update the Foreign Affairs Manual and Foreign Affairs Handbook to define its organizational structure and assign the associated cloud-related responsibilities to the responsible offices in its organizational structure.
2	Open	No
The Bureau of Diplomatic Technology should update its cloud computing policies in accordance with Department standards.
3	Open	No
The Bureau of Diplomatic Technology should update its cloud service procurement policies and guidelines and communicate the changes to the Department.
4	Open	No
The Bureau of Diplomatic Technology should review Department configuration management policies for inconsistencies and update them to align with federal cloud policies.
5	Open	No
The Bureau of Diplomatic Technology, in coordination with the Bureau of Diplomatic Security, should follow Department standards for cloud security guidelines.
6	Open	No
The Bureau of Diplomatic Technology should comply with Department encryption key management requirements for enterprise cloud systems.
7	Open	No
The Bureau of Diplomatic Technology should implement a communication plan for its domestic and overseas customers to include details on cloud responsibilities and available cloud products and services.
8	Open	No
The Bureau of Diplomatic Technology should implement a formal process for gathering regular customer feedback on its cloud products and services.
10	Open	No
The Bureau of Diplomatic Technology should bring the enterprise-level cloud services contracting officer’s representative program into compliance with Department standards.
11	Open	No
The Bureau of Diplomatic Technology, in coordination with the Bureau of Administration, should develop and communicate guidance specifying what cloud services procurement requirements staff need to implement, which staff are responsible for implementing them, and how the requirements should be implemented.

Recommendation Number

Recommendation Status

Significant Recommendation

Additional Details

Open

The Bureau of Diplomatic Technology should update the Foreign Affairs Manual and Foreign Affairs Handbook to define its organizational structure and assign the associated cloud-related responsibilities to the responsible offices in its organizational structure.

Open

The Bureau of Diplomatic Technology should update its cloud computing policies in accordance with Department standards.

Open

The Bureau of Diplomatic Technology should update its cloud service procurement policies and guidelines and communicate the changes to the Department.

Open

The Bureau of Diplomatic Technology should review Department configuration management policies for inconsistencies and update them to align with federal cloud policies.