Best Practices for Federal Agencies to Strengthen Cloud Security

We conducted this review on behalf of the Federal Audit Executive Council’s Cross-Cutting Issues Subcommittee which was established to support the Council of the Inspectors General on Integrity and Efficiency (CIGIE) Audit Committee by coordinating government-wide activities that promote economy and efficiency in Federal programs and operations and address areas of weakness and vulnerability regarding fraud, waste, abuse and mismanagement. The Subcommittee also supports CIGIE by assisting in its statutory responsibility to address integrity, economy and effectiveness issues that transcend individual Government agencies. In October 2023, the Subcommittee formed a working group consisting of representatives from six OIGs to begin a collaboration effort to inform Federal agencies of best practices and aid Federal agencies with implementing cloud security in an effective manner based on findings, recommendations and conclusions identified in Federal oversight reports.