The Environmental Protection Agency is in the dark with its cloud contracts. EPA’s Inspector General says the agency doesn’t know how many cloud contracts it has, nor how secure they are. For an investigation, the IG chose a contract that met the definition of a cloud system. But the EPA didn’t report it as a cloud contract because it didn’t have “cloud” in the description. The agency’s also using a sub- contractor that’s not compliant with the Federal Risk and Authorization Management Program. The IG says the company might not have the capability to access its cloud system hardware so the office can investigate. The EPA didn’t even know it was buying a cloud system at the very start of the contracting process. The IG says the agency wasn’t aware cloud computing was part of the system it was procuring.

Copyright © 2025 Federal News Network. All rights reserved. This website is not intended for users located within the European Economic Area.