The FDIC’s Adoption of Cloud Computing Services

Submitting OIG:

Date Issued:

Tuesday, July 25, 2023

Agency Reviewed / Investigated:

Submitting OIG-Specific Report Number:

AUD-23-003

Location(s):

Agency-Wide

Type of Report:

Audit

Questioned Costs:

Funds for Better Use:

Report updated under NDAA 5274:

View Document:

Attachment	Size
AUD-23-003-508.pdf	894.62 KB

Related Open Recommendations

Recommendation Number	Recommendation Status	Significant Recommendation
1	Open	No
Develop and maintain an inventory and catalog of all FDIC data used throughout the cloud data lifecycle.
2	Open	No
Establish and implement data governance requirements (e.g., policies, processes, roles, and responsibilities) for managing data residing in the cloud.
3	Open	No
Establish an exit strategy for all cloud-based systems.
7	Open	No
Update the Project Management Lifecycle and/or System Development Life Cycle frameworks to include a Disposal phase and process.
8	Open	No
Develop and implement policies and procedures for overseeing the decommissioning of legacy systems.
9	Open	No
Review all current and planned system replacements and ensure legacy system decommissioning plans are created in accordance with FDIC policies and procedures.