§3607 Definitions

Summary

Says the usual definitions in sections 3502 and 3552 apply here unless paragraph (b) gives different meanings. Paragraph (b) then defines key words used through section 3616. Administrator means the Administrator of General Services. Appropriate congressional committees means the Senate Committee on Homeland Security and Governmental Affairs and the House Committee on Oversight and Reform. The terms "authorization to operate" and "Federal information" use the meanings in OMB Circular A–130 (or any successor). Cloud computing uses the meaning in NIST Special Publication 800‑145 (or any successor). Cloud service provider means an entity that offers cloud products or services to agencies. FedRAMP means the Federal Risk and Authorization Management Program established under section 3608. FedRAMP authorization means a certification showing a cloud product or service has finished the FedRAMP process as the Administrator decides, or has a FedRAMP provisional authorization to operate as the FedRAMP Board decides. FedRAMP authorization package means the key information an agency needs to decide whether to allow a cloud system or use common controls. FedRAMP Board means the board set up under section 3610. Independent assessment service means a third‑party organization accredited by the Administrator to assess cloud providers and their products. Secretary means the Secretary of Homeland Security.