From: FedScoop
By Greg Otto
The Environmental Protection Agency doesn’t know how many cloud computing contracts it currently holds nor is it aware of how secure they are, according to a report from the agency’s Office of the Inspector General.
The EPA IG report also says the agency is using services from a subcontractor that is not compliant with the Federal Risk and Authorization Management Program (FedRAMP) and may not be able to access the actual hardware for investigative purposes.
“Our audit work disclosed management oversight concerns regarding the EPA’s use of cloud computing technologies,” states the report state, released last week. “These concerns highlight the need for the EPA to strengthen its catalog of cloud vendors and processes to manage vendor relationships to ensure compliance with federal security requirements.”
Leave a Reply