Private Sector Cloud Practices Offer Blueprint for Federal Agencies

As federal agencies continue shifting operations to cloud-based systems, a new report from the Government Accountability Office (GAO) highlights how private sector practices could guide that transition. Based on a survey of 18 leading private companies, the report identifies 19 best practices across acquisition, cybersecurity, and workforce development—key areas where cloud adoption often faces hurdles.

Companies reported using seven acquisition practices, including establishing clear business cases and setting explicit performance expectations in vendor contracts. Six cybersecurity strategies were also widely implemented, such as deploying continuous monitoring and defining shared security responsibilities between providers and clients. Workforce development practices focused on closing skill gaps, fostering talent retention, and shifting internal culture to support cloud integration.

GAO’s review noted that companies viewed nearly all of these practices as essential to successful cloud adoption. The findings were validated by academic experts in cloud computing, underscoring their relevance for organizations seeking to modernize their IT infrastructure. Companies also described how investing in training and cybersecurity tools was critical to achieving long-term benefits.

The report further identified specific challenges companies encountered, such as technical integration issues and vendor lock-in. Many organizations addressed these concerns through multi-cloud strategies and early planning, which enhanced flexibility and reduced reliance on a single service provider. While these approaches required upfront investments, respondents said they helped optimize cloud resource use and reduce operational risks.

GAO conducted the survey to inform federal policymakers and program managers amid growing government investments in cloud technology. With private sector organizations already navigating similar transitions, the report aims to bridge knowledge gaps and provide actionable guidance for public sector cloud adoption efforts.

Article by multiple RFHC contributors, based upon information from the Government Accountability Office press release GAO-25-106369

---