44 U.S.C. § 3610 - U.S. Code - Unannotated Title 44. Public Printing and Documents § 3610. FedRAMP Board

(1) The Department of Defense.

(2) The Department of Homeland Security.

(3) The General Services Administration.

(4) Such other agencies as determined by the Director, in consultation with the Administrator.

(1) cloud computing;

(2) cybersecurity;

(3) privacy;

(4) risk management; and

(5) other competencies identified by the Director to support the secure authorization of cloud services and products.

(1) in consultation with the Administrator, serve as a resource for best practices to accelerate the process for obtaining a FedRAMP authorization;

(2) establish and regularly update requirements and guidelines for security authorizations of cloud computing products and services, consistent with standards and guidelines established by the Director of the National Institute of Standards and Technology, to be used in the determination of FedRAMP authorizations;

(3) monitor and oversee, to the greatest extent practicable, the processes and procedures by which agencies determine and validate requirements for a FedRAMP authorization, including periodic review of the agency determinations described in section 3613(b);

(4) ensure consistency and transparency between agencies and cloud service providers in a manner that minimizes confusion and engenders trust; and

(5) perform such other roles and responsibilities as the Director may assign, with concurrence from the Administrator.