Browse Arkansas Code titles and sections
44 U.S.C. § 3611 — Independent assessment
Federal law — U.S. Code and appendices · legal_authorities
The Administrator may determine whether FedRAMP may use an independent assessment service to analyze, validate, and attest to the quality and compliance of security assessment materials provided by cloud service providers during the course of a determination of whether to use a cloud computing product or service.
Source: Supplied U.S. Code snapshot — release unconfirmed · 44 U.S.C. § 3611
Stored review status: release_metadata_unconfirmed. A text match is a research starting point; applicability is not established.
Original supplied file — preserved unchanged
Download original Markdown file
File SHA-256: a742df3cb67d4625ad6c46aaa62dfe56ecb0e4fdd65fba948e7bde90f0921d09. The original may include catalog metadata, neighboring provisions, or embedded records outside this collection's scope. Search shows only the selected federal record. Historical editions and unverified snapshots are not a statement of current law.
Authority boundary: historical or unconfirmed source not current law verified.
Open the recorded source website ↗
Record provenance
Stable record: federal_law:legal_authorities:record_usc_bccdec1279c1a7ad4a1e9589
Source file: Laws/federal/codes/united-states-code/title-44/section-3611-independent-assessment--1c37d0a8f5.md
Pages: Not recorded – Not recorded
Passage SHA-256: a1ec333497735005fef9d408af20706ecf314efc09056ead6f8b31bf51bd5cd6
Source location: Title 44, Chapter 36, § 3611; chapter-036-management-and-promotion-of-electronic-government-services.md
Stored source content
The Administrator may determine whether FedRAMP may use an independent assessment service to analyze, validate, and attest to the quality and compliance of security assessment materials provided by cloud service providers during the course of a determination of whether to use a cloud computing product or service.
Cross-references
Connections may be documented source relationships, shared citations or nearby passages. Each explains its basis; a connection alone does not establish applicability to your situation.
Federal law — U.S. Code and appendices · legal_authorities
**(a) In General.—** Except as provided under subsection (b), the definitions under sections 3502 and 3552 apply to this section through section 3616.
**(b) Additional Definitions.—** In this section through section 3616:
(1) **Administrator.—** — The term “Administrator” means the Administrator of General Services.
(2) **Appropriate congressional committees.—** — The term “appropriate congressional committees” means the Committee on Homeland Security and Governmental Affairs of the Senate and the Committee on Oversight and Reform of the House of Representatives.
(3) **Authorization to operate; federal information.—** — The terms “authorization to operate” and “Federal information” have the meaning given those term 11 So in original. Probably should be “terms”. in Circular A–130 of the Office of Management and Budget entitled “Managing Information as a Strategic Resource”, or any successor document.
(4) **Cloud computing.—** — The term “cloud computing” has the meaning given the term in Special Publication 800–145 of the National Institute of Standards and Technology, or any successor document.
(5) **Cloud service provider.—** — The term “cloud service provider” means an entity offering cloud computing products or services to agencies.
(6) **FedRAMP.—** — The term “FedRAMP” means the Federal Risk and Authorization Management Program established under section 3608.
(7) **FedRAMP authorization.—** — The term “FedRAMP authorization” means a certification that a cloud computing product or service has—
(A) completed a FedRAMP authorization process, as determined by the Administrator; or
(B) received a FedRAMP provisional authorization to operate, as determined by the FedRAMP Board.
(8) **Fedramp authorization package.—** — The term “FedRAMP authorization packa
Source: Supplied U.S. Code snapshot — release unconfirmed · 44 U.S.C. § 3607
Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
Page 213
TITLE 44—PUBLIC PRINTING AND DOCUMENTS
§ 3612
ommendations to the Administrator regarding
the requirements and guidelines for, and the
prioritization of, security assessments of cloud
computing products and services.
(b) MEMBERSHIP.—The FedRAMP Board shall
consist of not more than 7 senior officials or ex-
perts from agencies appointed by the Director,
in consultation with the Administrator, from
each of the following:
(1) The Department of Defense.
(2) The Department of Homeland Security.
(3) The General Services Administration.
(4) Such other agencies as determined by the
Director, in consultation with the Adminis-
trator.
(c)
QUALIFICATIONS.—Members
of
the
FedRAMP Board appointed under subsection (b)
shall have technical expertise in domains rel-
evant to FedRAMP, such as—
(1) cloud computing;
(2) cybersecurity;
(3) privacy;
(4) risk management; and
(5) other competencies identified by the Di-
rector to support the secure authorization of
cloud services and products.
(d) DUTIES.—The FedRAMP Board shall—
(1) in consultation with the Administrator,
serve as a resource for best practices to accel-
erate the process for obtaining a FedRAMP
authorization;
(2) establish and regularly update require-
ments and guidelines for security authoriza-
tions of cloud computing products and serv-
ices, consistent with standards and guidelines
established by the Director of the National In-
stitute of Standards and Technology, to be
used in the determination of FedRAMP au-
thorizations;
(3) monitor and oversee, to the greatest ex-
tent practicable, the processes and procedures
by which agencies determine and validate re-
quirements for a FedRAMP authorization, in-
cluding periodic review of the agency deter-
minations described in section 3613(b)
Source: Supplied 2024 U.S. Code historical extraction · 44 U.S.C. § 3611
Stored review status: historical_2024_not_currentness_verified. Same stored citation; legal effect and authority still require review.