The US Department of Defense can't mitigate restrictive conditions in its cloud contracts

Alfonso Maruccia

Posts: 1,029   +302
Staff
Facepalm: The Pentagon is once again being accused of inefficiency and bad IT practices by the auditing agencies of the US government. The newly reported issues are related to cloud contracts, which the DoD is seemingly unable to assess in a proper and efficient way.

The US Government Accountability Office (GAO) analyzed the software licenses used by the Department of Defense (DoD), focusing in particular on commercial cloud computing offers. GAO officials found several issues within those contracts, despite highlighting the fact that federal agencies are required to move their data and software to the cloud whenever possible.

Software licenses and restrictive practices employed by cloud vendors can "limit or prevent" such migration efforts, GAO said. Some vendors charge extra fees to use their software with third-party cloud providers, the agency exemplifies, and these restrictive practices usually bring the cost of cloud services up or affect the choice of cloud providers.

As for how the US DoD manages cloud contracts, GAO officials found that the Pentagon lacks a true evaluation prowess over restrictions and cost-mounting licenses. The agency chose six different DoD projects for its study, highlighting how restrictive software license practices aren't analyzed as they should.

Potential impacts of restrictive licenses include an increased infrastructure cost because of additional fees to use software in the cloud, GAO said, or for software products that are only sold in bundles. Choice for cloud providers can be limited by a software vendor for compatibility or commercial reasons, while a vendor can even require a single, specific cloud service provider for its own reasons.

The DoD still has no official guidance on how to properly mitigate the "identified impacts" of restrictive software licensing practices, GAO said. The Pentagon's budget for cloud contracts has inflated accordingly, as the DoD was spending $1.4 billion in 2021 and is now investing around $2 billion. Restrictions aren't just a procedural issue, they also cost a lot of money to US taxpayers.

The DoD agreed with the latest GAO assessment, stating that updated guidance over cloud contracts and restriction mitigation would be available by the end of the next fiscal year. The fact is, US Defense seems to have some recurring issues while dealing with computer technology and spending efficiency.

In 2022, GAO made "nine recommendations" to DoD regarding key cloud requirements. As of June 2023, the latest report states, all the aforementioned recommendations still need to be implemented. The DoD Inspector General previously said that the US Defense is unable to properly manage government-issued smartphones, while a survey from the General Services Administration found that the DoD has the worst IT support in the entire US government.

Permalink to story.

 
One day there's going to be a serious data leak because one goverment had to opt for the most cheapest party out there.

Cloud is dangerous.
 
I did contract work for the DoD almost 20 years ago... even as a contractor I was frustrated with the BS decisions which were usually based on politics and not logic. I stopped and found a new job in less than three years, just couldn't deal with it. They weren't going to cloud yet, but that seems pretty stupid with the reliability issues in our internet infrastructure and not to mention the security concerns. Data should be internal, and can be added to the cloud for convenience to users who need mobile access outside the network.
 
The Pentagon and its bunch of corrupt minions could never resist throwing tax payers' money at any thing that sounds futuristic and fancy, whether its Cloud / AI / Alien mummies or Romulan Ale.
 
Easier said than done.
But being stupid is a better answer, yes?
I did contract work for the DoD almost 20 years ago... even as a contractor I was frustrated with the BS decisions which were usually based on politics and not logic. I stopped and found a new job in less than three years, just couldn't deal with it. They weren't going to cloud yet, but that seems pretty stupid with the reliability issues in our internet infrastructure and not to mention the security concerns. Data should be internal, and can be added to the cloud for convenience to users who need mobile access outside the network.
Then again, there's always a VPN.
 
But being stupid is a better answer, yes?

Then again, there's always a VPN.
Yes but employees are lazy, especially those in leadership positions. They also want to cut IT costs and don't like IT telling them no. So if they decide tho move all data to the cloud they don't need as many IT staff and can in theory save money. However they will lose money when services are inaccessible for whatever reason, and/or there is a security breach with the provider. Then they get to blame the provider instead of having to explain an internal issue their IT failed to prevent. They don't care of it costs more, especially in government positions because its just tax payer dollars, not dollars out of their leadership personnel budget.
 
The U.S. Military Industrial Congressional Complex has "accounting errors" and "magically finds more money". Yet, who cares about that and the insane debt. Instead we should worry about inefficiencies in their IT?
 
IMO, the answer is simple. You're the DOD. Don't use the fricken cloud. If you need a cloud, build your own.
What the hell is the Pentagon doing in the clouds in the first place. They should have and do have the resources for their own operations. They should have their own qualified and competent technicians to operate them. But then, any government bureaucracy with qualified and competent technicians is a rare bird at this day and time, including the GAO.
 
Back