Agency heads are required to "show preference in their procurement for shared IT services," such as email, cloud and cybersecurity services.