Browse Arkansas Code titles and sections
44 U.S.C. § 3615 — Reports to Congress; GAO report
Federal law — U.S. Code and appendices · legal_authorities
**(a) Reports to Congress.—** Not later than 1 year after the date of enactment of this section, and annually thereafter, the Director shall submit to the appropriate congressional committees a report that includes the following:
(1) During the preceding year, the status, efficiency, and effectiveness of the General Services Administration under section 3609 and agencies under section 3613 and in supporting the speed, effectiveness, sharing, reuse, and security of authorizations to operate for secure cloud computing products and services.
(2) Progress towards meeting the metrics required under section 3609(d).
(3) Data on FedRAMP authorizations.
(4) The average length of time to issue FedRAMP authorizations.
(5) The number of FedRAMP authorizations submitted, issued, and denied for the preceding year.
(6) A review of progress made during the preceding year in advancing automation techniques to securely automate FedRAMP processes and to accelerate reporting under this section.
(7) The number and characteristics of authorized cloud computing products and services in use at each agency consistent with guidance provided by the Director under section 3614.
(8) A review of FedRAMP measures to ensure the security of data stored or processed by cloud service providers, which may include—
(A) geolocation restrictions for provided products or services;
(B) disclosures of foreign elements of supply chains of acquired products or services;
(C) continued disclosures of ownership of cloud service providers by foreign entities; and
(D) encryption for data processed, stored, or transmitted by cloud service providers.
**(b) GAO Report.—** Not later than 180 days after the date of enactment of this section, the Comptroller General of the United States shall report to
Source: Supplied U.S. Code snapshot — release unconfirmed · 44 U.S.C. § 3615
Stored review status: release_metadata_unconfirmed. A text match is a research starting point; applicability is not established.
Original supplied file — preserved unchanged
Download original Markdown file
File SHA-256: 38699e9d3bf4d678ebb87e4bec3138e18b036686a1dbe9274844f57c27a95e30. The original may include catalog metadata, neighboring provisions, or embedded records outside this collection's scope. Search shows only the selected federal record. Historical editions and unverified snapshots are not a statement of current law.
Authority boundary: historical or unconfirmed source not current law verified.
Open the recorded source website ↗
Record provenance
Stable record: federal_law:legal_authorities:record_usc_bed2461ed654adc3e048fca8
Source file: Laws/federal/codes/united-states-code/title-44/section-3615-reports-to-congress-gao-report--7dba9c01c4.md
Pages: Not recorded – Not recorded
Passage SHA-256: 541807a7b41bb88f71d788bd5233a940e40112fe54d9156dcb418496686d1381
Source location: Title 44, Chapter 36, § 3615; chapter-036-management-and-promotion-of-electronic-government-services.md
Stored source content
**(a) Reports to Congress.—** Not later than 1 year after the date of enactment of this section, and annually thereafter, the Director shall submit to the appropriate congressional committees a report that includes the following:
(1) During the preceding year, the status, efficiency, and effectiveness of the General Services Administration under section 3609 and agencies under section 3613 and in supporting the speed, effectiveness, sharing, reuse, and security of authorizations to operate for secure cloud computing products and services.
(2) Progress towards meeting the metrics required under section 3609(d).
(3) Data on FedRAMP authorizations.
(4) The average length of time to issue FedRAMP authorizations.
(5) The number of FedRAMP authorizations submitted, issued, and denied for the preceding year.
(6) A review of progress made during the preceding year in advancing automation techniques to securely automate FedRAMP processes and to accelerate reporting under this section.
(7) The number and characteristics of authorized cloud computing products and services in use at each agency consistent with guidance provided by the Director under section 3614.
(8) A review of FedRAMP measures to ensure the security of data stored or processed by cloud service providers, which may include—
(A) geolocation restrictions for provided products or services;
(B) disclosures of foreign elements of supply chains of acquired products or services;
(C) continued disclosures of ownership of cloud service providers by foreign entities; and
(D) encryption for data processed, stored, or transmitted by cloud service providers.
**(b) GAO Report.—** Not later than 180 days after the date of enactment of this section, the Comptroller General of the United States shall report to the appropriate congressional committees an assessment of the following:
(1) The costs incurred by agencies and cloud service providers relating to the issuance of FedRAMP authorizations.
(2) The extent to which agencies have processes in place to continuously monitor the implementation of cloud computing products and services operating as Federal information systems.
(3) How often and for which categories of products and services agencies use FedRAMP authorizations.
(4) The unique costs and potential burdens incurred by cloud computing companies that are small business concerns (as defined in section 3(a) of the Small Business Act ([15 U.S.C. 632(a)](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title15-section632/a&num=0&edition=prelim)) as a part of the FedRAMP authorization process.
Cross-references
Connections may be documented source relationships, shared citations or nearby passages. Each explains its basis; a connection alone does not establish applicability to your situation.
Federal law — U.S. Code and appendices · legal_authorities
**(a) In General.—** Except as provided under subsection (b), the definitions under sections 3502 and 3552 apply to this section through section 3616.
**(b) Additional Definitions.—** In this section through section 3616:
(1) **Administrator.—** — The term “Administrator” means the Administrator of General Services.
(2) **Appropriate congressional committees.—** — The term “appropriate congressional committees” means the Committee on Homeland Security and Governmental Affairs of the Senate and the Committee on Oversight and Reform of the House of Representatives.
(3) **Authorization to operate; federal information.—** — The terms “authorization to operate” and “Federal information” have the meaning given those term 11 So in original. Probably should be “terms”. in Circular A–130 of the Office of Management and Budget entitled “Managing Information as a Strategic Resource”, or any successor document.
(4) **Cloud computing.—** — The term “cloud computing” has the meaning given the term in Special Publication 800–145 of the National Institute of Standards and Technology, or any successor document.
(5) **Cloud service provider.—** — The term “cloud service provider” means an entity offering cloud computing products or services to agencies.
(6) **FedRAMP.—** — The term “FedRAMP” means the Federal Risk and Authorization Management Program established under section 3608.
(7) **FedRAMP authorization.—** — The term “FedRAMP authorization” means a certification that a cloud computing product or service has—
(A) completed a FedRAMP authorization process, as determined by the Administrator; or
(B) received a FedRAMP provisional authorization to operate, as determined by the FedRAMP Board.
(8) **Fedramp authorization package.—** — The term “FedRAMP authorization packa
Source: Supplied U.S. Code snapshot — release unconfirmed · 44 U.S.C. § 3607
Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
**(a) Small business concerns**
(1) **In general** — For the purposes of this chapter, a small-business concern, including but not limited to enterprises that are engaged in the business of production of food and fiber, ranching and raising of livestock, aquaculture, and all other farming and agricultural related industries, shall be deemed to be one which is independently owned and operated and which is not dominant in its field of operation.
(2) **Establishment of size standards**
(A) *In general* — In addition to the criteria specified in paragraph (1) and subject to the requirements specified under subparagraph (C), the Administrator may specify detailed definitions or standards by which a business concern may be determined to be a small business concern for the purposes of this chapter or any other Act.
(B) *Additional criteria* — The standards described in paragraph (1) may utilize number of employees, dollar volume of business, net worth, net income, a combination thereof, or other appropriate factors.
(C) *Requirements* — Unless specifically authorized by statute, no Federal department (including the Administration when acting pursuant to subparagraph (A)) or agency may prescribe a size standard for categorizing a business concern as a small business concern, unless such proposed size standard—
(i) is proposed after an opportunity for public notice and comment;
(ii) provides for determining—
(I) the size of a manufacturing concern as measured by the manufacturing concern’s average employment based upon employment during each of the manufacturing concern’s pay periods for the preceding 24 months;
(II) the size of a business concern providing services on the basis of the annual average gross receipts of the business concern over
Source: Supplied U.S. Code snapshot — release unconfirmed · 15 U.S.C. § 632
Stored review status: release_metadata_unconfirmed. The source passage cites 15 U.S.C. § 632. This identifies an authority to review, not proof of applicability.
Federal law — U.S. Code and appendices · legal_authorities
Page 769
TITLE 15—COMMERCE AND TRADE
§ 632
Editorial Notes
REFERENCES IN TEXT
This subtitle, referred to in subsec. (a), is subtitle D
(§§ 141–147) of title I of div. K of Pub. L. 108–447, Dec. 8,
2004, 118 Stat. 3453, which enacted this section, amended
sections 637, 648, 657b, and 657c of this title, enacted
provisions set out as note under section 637 of this title,
and amended provisions set out as a note under section
657b of this title. For complete classification of subtitle
D to the Code, see Tables.
CODIFICATION
Section was enacted as part of the Small Business
Reauthorization and Manufacturing Assistance Act of
2004, and also as part of the Consolidated Appropria-
tions Act, 2005, and not as part of the Small Business
Act which comprises this chapter.
§ 632. Definitions
(a) Small business concerns
(1) In general
For the purposes of this chapter, a small-
business concern, including but not limited to
enterprises that are engaged in the business of
production of food and fiber, ranching and
raising of livestock, aquaculture, and all other
farming and agricultural related industries,
shall be deemed to be one which is independ-
ently owned and operated and which is not
dominant in its field of operation.
(2) Establishment of size standards
(A) In general
In addition to the criteria specified in
paragraph (1) and subject to the require-
ments specified under subparagraph (C), the
Administrator may specify detailed defini-
tions or standards by which a business con-
cern may be determined to be a small busi-
ness concern for the purposes of this chapter
or any other Act.
(B) Additional criteria
The standards described in paragraph (1)
may utilize number of employees, dollar vol-
ume of business, net worth, net income, a
combinatio
Source: Supplied 2024 U.S. Code historical extraction · 15 U.S.C. § 632
Stored review status: historical_2024_not_currentness_verified. The source passage cites 15 U.S.C. § 632. This identifies an authority to review, not proof of applicability.
Federal law — U.S. Code and appendices · legal_authorities
Page 215
TITLE 44—PUBLIC PRINTING AND DOCUMENTS
§ 3616
Statutory Notes and Related Subsidiaries
EFFECTIVE DATE OF REPEAL
Pub. L. 117–263, div. E, title LIX, § 5921(d)(1), Dec. 23,
2022, 136 Stat. 3458, provided that the repeal of this sec-
tion is effective on the date that is 5 years after Dec.
23, 2022.
CONSTRUCTION
For rule of construction regarding section 5921 of
Pub. L. 117–263, see section 5921(e) of Pub. L. 117–263, set
out as a note under section 3607 of this title.
§ 3615. Reports to Congress; GAO report
(a) REPORTS TO CONGRESS.—Not later than 1
year after the date of enactment of this section,
and annually thereafter, the Director shall sub-
mit to the appropriate congressional commit-
tees a report that includes the following:
(1) During the preceding year, the status, ef-
ficiency, and effectiveness of the General
Services Administration under section 3609
and agencies under section 3613 and in sup-
porting
the
speed,
effectiveness,
sharing,
reuse, and security of authorizations to oper-
ate for secure cloud computing products and
services.
(2) Progress towards meeting the metrics re-
quired under section 3609(d).
(3) Data on FedRAMP authorizations.
(4) The average length of time to issue
FedRAMP authorizations.
(5) The number of FedRAMP authorizations
submitted, issued, and denied for the pre-
ceding year.
(6) A review of progress made during the pre-
ceding year in advancing automation tech-
niques to securely automate FedRAMP proc-
esses and to accelerate reporting under this
section.
(7) The number and characteristics of au-
thorized cloud computing products and serv-
ices in use at each agency consistent with
guidance provided by the Director under sec-
tion 3614.
(8) A review of FedRAMP measures to ensure
the security
Source: Supplied 2024 U.S. Code historical extraction · 44 U.S.C. § 3615
Stored review status: historical_2024_not_currentness_verified. Same stored citation; legal effect and authority still require review.