PRIA Logo™
119-hr-10915119th Congress

Common-Sense Cloud Security Act

Sponsored By: Representative McCormick, Richard [R-GA-7]

Introduced

Summary

National cloud security standards and a voluntary certification program. This bill would direct the National Institute of Standards and Technology to develop standards, prototypes, and final guidance to secure cloud-based infrastructure and would push federal procurement rules to align with those standards.

Show full summary
  • Federal agencies would see FedRAMP updated to conform to the new standards within one year of final publication. Agencies would require cloud providers to disclose their aggregate blast radius, east-west traffic monitoring, and the scope of third-party integrations.
  • Cloud service providers would be able to pursue a voluntary Cloud Security Certification Program with tiered levels. Independent accredited testing labs would evaluate applications and must determine certification within 90 days of submission.
  • Owners and operators of critical infrastructure would get new guidance on preventing and detecting intracloud attacks, managing workload identities, vetting third-party integrations, and adopting AI tools for suspicious activity detection. The Director would report to Congress on federal implementation, private adoption gaps, and recommended actions.

Personalized for You

How does this bill affect your finances?

Personalize government policy and PRIA will tell you what this bill means for your household, plus every other piece of legislation we track. PRIA reads each provision against your financial profile to show you exactly what matters to your wallet.

Free to download

Bill Overview

No Economic Impacts Identified for this Bill

Sponsors & CoSponsors

Sponsor

McCormick, Richard [R-GA-7]

GA • R

Cosponsors

There are no cosponsors for this bill.

Roll Call Votes

No roll call votes available for this bill.

View on Congress.gov
Back to Legislation