Audit of DoD Cloud Access by Contractors in Countries of Concern
Summary
The DOD OIG has announced an audit of contractor access to DoD cloud computing environments in countries of concern, initiated in March 2026. This audit is mandated by the National Defense Authorization Act for Fiscal Year 2026 and will examine contractor access controls and data security.
What changed
The Department of Defense Office of Inspector General (DOD OIG) has issued a project announcement for a new audit concerning contractor access to DoD cloud computing environments, specifically focusing on contractors located in countries of concern. This audit, designated Project No. D2026-D000CT-0069.000, is scheduled to commence in March 2026 and is driven by a legislative requirement from the National Defense Authorization Act for Fiscal Year 2026. The audit will examine the security protocols and compliance measures in place for contractors handling sensitive DoD data in cloud environments within specified foreign nations.
Compliance officers for contractors with access to DoD cloud computing environments, particularly those operating in or with ties to countries of concern, should prepare for scrutiny. While the audit begins in March 2026, it is advisable to proactively review and document existing access controls, data handling policies, and compliance with relevant security directives. The legislative mandate suggests a focus on national security implications and data protection, and non-compliance could lead to findings and potential corrective actions or loss of contract privileges.
What to do next
- Review and document contractor access controls to DoD cloud environments.
- Assess compliance with security directives for data handling in countries of concern.
- Prepare for audit inquiries regarding cloud access by contractors.
Archived snapshot
Mar 28, 2026GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.
Keyword Component and Report Type Component and Report Type Administrative Investigations Audit Evaluations Lead Inspector General Reports Ukraine COVID-19 Report COVID-19 Project Announcement Memos Semiannual Report to the Congress Project Announcement Memos Testimony Oversight Plan Management Challenges Other Publications Calendar Year Calendar Year 2026 2025 2024 2023 2022 2021 2020 2019 2018 2017 2016 2015 2014 2013 2012 2011 2010 2009 2008 2007 2006 2005 2004 2003 2002 2001 2000 1999 1998 1997 1996 1995 1994 1993 1992 1991 1990 1989 1987 March 18, 2026
Project Announcement: Audit of Access to DoD Cloud Computing Environments by Contractors Located in Countries of Concern (Project No. D2026-D000CT-0069.000)
Audit
The purpose of this memorandum is to notify you that we are initiating the subject audit in March 2026. We are conducting this audit in response to a legislative requirement in Public Law No. 119-60, “The National Defense Authorization Act for Fiscal Year 2026,” December 18, 2025, and the accompanying Joint Explanatory Statement.
Related Documents
Project Announcement: Audit of Access to DoD Cloud Computing Environments by Contractors Located in Countries of Concern (Project No. D2026-D000CT-0069.000) Project Announcements audit
DODIG.MIL
OVERSIGHT WORK
RESOURCES
- OIG Policies Instructions
- Freedom of Information Act (FOIA)
- Fraud Detection Resources
- Programs Managed by OIG
- DoD Hotline
- Federal Activities Inventory Reform (FAIR)
EXTERNAL RESOURCES
- Council of the Inspector Generals on Integrity and Efficiency (CIGIE)
- Oversight.gov
- UkraineOversight.gov
DISCLAIMERS
- Privacy and Security
- Link Disclaimer
- EEO/No Fear
- Website Policies
- Social Media User Agreement
- Accessibility/Section 508
- Office of Inspector General, United States Department of Defense, 4800 Mark Center Drive, Alexandria, VA 22350-1500
Related changes
Get daily alerts for DOD OIG Reports
Daily digest delivered to your inbox.
Free. Unsubscribe anytime.
About this page
Every important government, regulator, and court update from around the world. One place. Real-time. Free. Our mission
Source document text, dates, docket IDs, and authority are extracted directly from DOD OIG.
The summary, classification, recommended actions, deadlines, and penalty information are AI-generated from the original text and may contain errors. Always verify against the source document.
Classification
Who this affects
Taxonomy
Browse Categories
Get alerts for this source
We'll email you when DOD OIG Reports publishes new changes.
Subscribed!
Optional. Filters your digest to exactly the updates that matter to you.