Province’s cloud vendor management controls inadequate: Auditor General
- 6 days ago
- 2 min read
WINNIPEG - The Province of Manitoba does not have consistent practices for managing its cloud service providers, which could lead to security issues or disruptions in government services, says Auditor General Tyson Shtykalo. The finding is contained in a new audit report, Managing the Risks of Using Cloud Service Providers.
“The Province of Manitoba is increasingly relying on third-party cloud providers to store vital data and keep essential government programs and services running,” Shtykalo said. “With most new IT projects relying on cloud-based solutions, ensuring the Province’s information systems are secure, reliable, and well managed is essential.”
Cloud service providers are third-party companies that host government data and systems. Weak oversight of these providers could expose the Province to greater risks related to security, continuity of operations, protection of personal and sensitive information, and unnecessary financial costs.
Key audit findings
The audit found that the Province did not have an approved cloud vendor management framework during the period examined. As a result, departments were using cloud services without consistent guidance or oversight.
As well, supporting documentation for vendor selection decisions was often incomplete or missing, limiting the Province’s ability to demonstrate that vendors met key security and operational requirements.
The audit also identified gaps in the Province’s ongoing management of cloud service providers:
· Contracts were missing or did not include key security requirements.
· Cloud service providers were not subject to regular monitoring.
· An exit strategy for the termination of cloud service providers was not clearly defined.
“These issues expose the Province to significant security, operational, and financial risks, highlighting the need for stronger oversight as cloud use continues to expand,” Shtykalo said
Recommendations
The report includes six recommendations to strengthen governance, procurement documentation, contracting, ongoing monitoring, and exit strategies for cloud services.
For further information:
About the Auditor General of Manitoba
In 2026, the Office of the Auditor General of Manitoba celebrates its 150th anniversary. Since 1876, provincial auditors have helped to ensure that public resources are managed effectively and responsibly. Today, as an independent officer of the Manitoba Legislative Assembly, the Auditor General proudly continues that legacy. The Office is dedicated to promoting government accountability and public administration excellence for all Manitobans.
E-alerts and updates
Sign up for e-alerts at oag.mb.ca and get news releases sent directly to your inbox. For regular updates, follow @AuditorGenMB on LinkedIn, Facebook, Instagram, and YouTube.
Images
Media inquiries
Frank Landry, Communications Manager
204.792.9145