Title 15Commerce and TradeRelease 119-73

§7463 Cloud computing strategy

Title 15 › Chapter CHAPTER 100A— - CYBERSECURITY ENHANCEMENT › Subchapter SUBCHAPTER IV— - ADVANCEMENT OF CYBERSECURITY TECHNICAL STANDARDS › § 7463

Last updated Apr 6, 2026|Official source

Summary

The Director must keep creating and promoting a full strategy for how the Federal Government uses cloud computing. The Director must do this while working with the Office of Management and Budget, the Federal Chief Information Officers Council, other federal agencies, and private-sector stakeholders. When carrying out the plan, the Director must focus on speeding work with the private sector to make standards that let cloud services work together and be moved between providers; encourage private-sector testing to show services meet those standards; and, with OMB and the private sector, produce security frameworks, guides, and best practices for agencies to meet security and privacy needs. That includes making sure cloud data centers and the data in them are physically secure, that access to the data is secure, developing the security standards required under section 278g–3, and supporting automated continuous monitoring systems.

Full Legal Text

Title 15, §7463

Commerce and Trade — Source: USLM XML via OLRC

(a)The Director, in coordination with the Office of Management and Budget, in collaboration with the Federal Chief Information Officers Council, and in consultation with other relevant Federal agencies and stakeholders from the private sector, shall continue to develop and encourage the implementation of a comprehensive strategy for the use and adoption of cloud computing services by the Federal Government.
(b)In carrying out the strategy described under subsection (a), the Director shall give consideration to activities that—
(1)accelerate the development, in collaboration with the private sector, of standards that address interoperability and portability of cloud computing services;
(2)advance the development of conformance testing performed by the private sector in support of cloud computing standardization; and
(3)support, in coordination with the Office of Management and Budget, and in consultation with the private sector, the development of appropriate security frameworks and reference materials, and the identification of best practices, for use by Federal agencies to address security and privacy requirements to enable the use and adoption of cloud computing services, including activities—
(A)to ensure the physical security of cloud computing data centers and the data stored in such centers;
(B)to ensure secure access to the data stored in cloud computing data centers;
(C)to develop security standards as required under section 278g–3 of this title; and
(D)to support the development of the automation of continuous monitoring systems.

Reference

Citations & Metadata

Citation

15 U.S.C. § 7463

Title 15Commerce and Trade

Last Updated

Apr 6, 2026

Release point: 119-73