1. (1) The state agency will document the controls and processes that are in place to proactively control cloud spend and maintain acceptable budgeted versus actual variances.
2. (2) The state agency will establish and document, in advance of contract execution, an acceptable threshold for budgeted variance and mitigation plan based upon risk tolerance.
3. (3) The state agency will perform a documented review of budgeted versus actual cloud spend on a monthly basis and maintain records for at least 24 months or in compliance with retention schedules, whichever is longer.

Rulemaking Authority 282.0051(6) FS. Law Implemented 282.0051 FS. History‒New 1-9-20.