§3607 Definitions

Summary

Tells which word meanings to use for rules that run through section 3616. Unless the items below change them, the meanings from sections 3502 and 3552 apply. Administrator — the Administrator of General Services. Appropriate congressional committees — the Senate Committee on Homeland Security and Governmental Affairs and the House Committee on Oversight and Reform. “Authorization to operate” and “Federal information” — mean what OMB Circular A‑130 (or its successor) says. Cloud computing — means what NIST Special Publication 800‑145 (or its successor) says. Cloud service provider — a company that offers cloud products or services to federal agencies. FedRAMP — the Federal Risk and Authorization Management Program (see section 3608). FedRAMP authorization — a certification showing a cloud product or service completed the FedRAMP process or got a provisional authorization from the FedRAMP Board. FedRAMP authorization package — the key information an agency uses to decide on authorizing a cloud system or common controls. FedRAMP Board — the board in section 3610. Independent assessment service — a third‑party group the Administrator accredits to assess cloud providers. Secretary — the Secretary of Homeland Security.