SBA's Cloud Migration and Oversight

When evaluating options for new information technology (IT) deployments, agencies are required to default to cloud-based solutions whenever a secure, reliable, cost-effective cloud option exists. Cloud computing allows users to access and use shared data and computing services. The cloud also provides users access to resources without agencies having to build additions to their infrastructure. Our evaluation identified that the Small Business Administration (SBA) needs to improve its cloud migration and oversight controls in risk management, security, data mobility, and IT investments to meet federal guidance and standards. Our scope included SBA’s cloud systems inventory, as well as SBA’s cloud migration efforts and oversight from fiscal years 2017 through 2018. We provided eight recommendations to improve SBA’s cloud migration and oversight efforts. SBA management fully agreed with four recommendations and partially agreed with four recommendations. We found that the planned corrective actions resolved each of the eight recommendations.