Pentagon Didn’t Check Risks Before Authorizing Cloud Services, IG Finds

The military branches “may be unaware of known vulnerabilities and cybersecurity risks associated with operating their systems or storing their data,” the Pentagon inspector general found.

Defense Department officials who authorized the use of commercial cloud services across components of the agency did not review all required documentation needed to determine potential security concerns, leaving DOD’s armed forces unaware of vulnerabilities and cybersecurity risks across their systems, according to an audit publicly released by the agency’s Office of Inspector General on Feb. 16.