Data Egress: Opportunities Exist for GAO to Strengthen Procedures for Management of Data Egress Fees
Fast Facts
GAO uses cloud services to reduce the costs of operations. Transferring data into the cloud (ingress) is often free to users; however, some providers charge fees for accessing or transferring data out of the cloud (egress).
We found GAO did not establish formal procedures implementing cloud cost management policies and did not include data egress fees in a major system's cost estimate. As a result, opportunities exist to improve cloud service monitoring and cost estimating processes.
Our recommendations will help GAO ensure it captures and manages all costs for its cloud services.
Date Egress
Highlights
What OIG Found
According to GAO’s strategic plan, it will reduce costs of operations, in part, by leveraging cloud-based technologies. Transferring data into the cloud (data ingress) is often free to users; however, some providers charge data egress fees for accessing data or transferring it out of the cloud. Despite the minimal costs GAO has incurred for data egress, opportunities exist for GAO to improve its monitoring and cost estimating processes for cloud services.
The OIG found that, due to other priorities, GAO did not establish formal procedures implementing cloud cost management policies such as instituting and reviewing budget threshold alerts and cloud service usage reports. Due to the lack of procedures, GAO may not fully meet its strategic objective related to managing and reducing the cost of its cloud-based technologies in the future.
The OIG also found that GAO officials did not include data egress fees in a major system’s cost estimate and did not document the exclusion because they deemed data egress fees minimal. As a result, GAO may not be fully aware of the total costs for its cloud initiatives, which could impact its ability to implement new projects and the operation and maintenance of existing initiatives.
Why the OIG Did This Audit
The OIG conducted this audit to (1) describe GAO’s efforts to address data egress fees in procuring cloud services and (2) assess the extent to which the estimated costs of GAO’s cloud services programs quantify data egress fees.
Recommendations
GAO concurred with the OIG’s recommendations to (1) establish cost management procedures for its cloud systems, including addressing data egress fees and the implementation and review of alerts and reports, and (2) develop an oversight mechanism to ensure that all fees, including data egress fees, are quantified in the cost estimate, or the exclusion of any costs is documented.