Information Technology Reform: Progress Made but Future Cloud Computing Efforts Should be Better Planned

The selected federal agencies have made progress implementing the Office of Management and Budget’s (OMB) “Cloud First” policy. Consistent with this policy, each of the seven agencies incorporated cloud computing requirements into their policies and processes.

For example, one agency had incorporated a review of its information technology (IT) investment portfolio to identify candidates for a cloud solution into its IT plan. Further, each of the seven agencies met the OMB deadlines to identify three cloud implementations by February 2011 and to implement at least one service by December 2011. However, two agencies do not plan to meet OMB’s deadline to implement three services by June 2012, but plan to do so by calendar year end, ranging from August to December. Each of the seven agencies has also identified opportunities for future cloud implementations, such as moving storage and help desk services to a cloud environment. While each of the seven agencies submitted plans to OMB for implementing the cloud solutions, all but one plan were missing key required elements. For example, 7 of the 20 plans did not include estimated costs and none of the plans for services that were to migrate existing functionality to a cloud-based service included plans for retiring or repurposing the associated legacy systems. According to agency officials, this was largely because the information was not available at the time the plans were developed. Until agencies’ cloud implementations are sufficiently planned and relevant systems are retired, the benefits of federal efforts to implement cloud solutions—improved operational efficiencies and reduced costs—may be delayed or not fully realized.

GAO identified seven common challenges associated with the implementation of OMB’s “Cloud First” policy.
1. Meeting Federal Security Requirements
2. Obtaining guidance
3. Acquiring knowledge and expertise
4. Certifying and accrediting vendors
5. Ensuring data portability and interoperability
6. Overcoming cultural barriers
7. Procuring services on a consumption (on-demand) basis

[GAO-12-756, July 11]