When evaluating options for new information technology (IT) deployments, agencies are required to default to cloud-based solutions whenever a secure, reliable, cost-effective cloud option exists. Cloud computing allows users to access and use shared data and computing services. The cloud also provides users access to resources without agencies having to build additions to their infrastructure. Our evaluation identified that the Small Business Administration (SBA) needs to improve its cloud migration and oversight controls in risk management, security, data mobility, and IT investments to meet federal guidance and standards. Our scope included SBA’s cloud systems inventory, as well as SBA’s cloud migration efforts and oversight from fiscal years 2017 through 2018. We provided eight recommendations to improve SBA’s cloud migration and oversight efforts. SBA management fully agreed with four recommendations and partially agreed with four recommendations. We found that the planned corrective actions resolved each of the eight recommendations.
| Report Date | Agency Reviewed / Investigated | Report Title | Type | Location | |
|---|---|---|---|---|---|
| Small Business Administration | SBA's Cloud Migration and Oversight | Inspection / Evaluation | Agency-Wide | View Report | |
| Federal Deposit Insurance Corporation | The FDIC’s Physical Security Risk Management Process | Inspection / Evaluation | Agency-Wide | View Report | |
| Department of Housing and Urban Development | Bank of America, Plano, TX, Followed the Loss Mitigation Requirements for All of the Loans Reviewed | Audit | Agency-Wide | View Report | |
| Department of the Treasury | Operation Inherent Resolve - Summary of Work Performed by the Department of the Treasury and Office of Inspector General Related to Terrorist Financing, ISIS, and Anti-Money Laundering for Second Quarter Fiscal Year 2019 | Other | Agency-Wide | View Report | |
| U.S. Agency for International Development | Closeout Compliance Examination of Saqqa & Khoudary Company Ltd for Subcontract Agreement Under Prime, The Morganti Group Inc., Task Order AID-294-TO-15-00008, Al Atatrah and Nuseirat Reservoirs and Pumping Facilities Project in West Bank and Gaza, Novemb | Other |
|
View Report | |
| U.S. Agency for International Development | Costs Representation Statement Closeout Audit of World Learning, Task Order AID-294-TO-13-00008, Master's Scholarship Program (MSP) in West Bank and Gaza, January 1 to September 29, 2017 | Other |
|
View Report | |
| Department of Energy | Audit Coverage of Cost Allowability for URS | CH2M Oak Ridge LLC During Fiscal Years 2014 through 2016 under Department of Energy Contract No. DE-SC0004645 | Inspection / Evaluation |
|
View Report | |
| Department of Defense | Audit of Payments to the DoD for Medical Services Provided to Department of Veterans Affairs Beneficiaries at Selected Army Medical Centers | Audit | Agency-Wide | View Report | |
| Department of State | Audit of the Office of Nonproliferation and Disarmament Fund Financial and Contract Activities During FY 2016 and FY 2017 | Audit | Agency-Wide | View Report | |
| Environmental Protection Agency | Management Alert: Certain Toxic Release Inventory Data Disclosed to the Public Are Inaccurate | Audit | Agency-Wide | View Report | |