Bill > HR8956

This bill aims to codify the Federal Risk and Authorization Management Program (FedRAMP) into law to improve the cybersecurity of the federal government's use of cloud computing products and services. Key provisions of the bill include: - Establishing FedRAMP within the General Services Administration and defining the roles and responsibilities of the GSA, the FedRAMP Board, agencies, and the Office of Management and Budget in overseeing and implementing the program. - Requiring agencies to use FedRAMP-authorized cloud products and services, allowing them to leverage existing FedRAMP authorizations, and providing a presumption of adequacy for FedRAMP authorizations. - Mandating regular reporting to Congress on the status, efficiency, and effectiveness of FedRAMP. - Creating a Federal Secure Cloud Advisory Committee to provide recommendations for improving FedRAMP processes. - Providing for a 5-year sunset of the statutory provisions to allow for potential future updates. Overall, the bill seeks to standardize and streamline the federal government's secure adoption of cloud computing capabilities.

Government Affairs, Military Affairs and Security

https://www.congress.gov/bill/117th-congress/house-bill/8956/all-info