§3607 Definitions

Summary

Defines words used in sections 3607 through 3616. Unless subsection (b) gives another meaning, the definitions in sections 3502 and 3552 apply. Administrator means the Administrator of General Services. Appropriate congressional committees means the Senate Committee on Homeland Security and Governmental Affairs and the House Committee on Oversight and Reform. Authorization to operate and Federal information follow the meanings in OMB Circular A–130 (or its replacement). Cloud computing follows the meaning in NIST Special Publication 800–145 (or its replacement). Cloud service provider means an organization that sells cloud products or services to agencies. FedRAMP means the Federal Risk and Authorization Management Program under section 3608. FedRAMP authorization means a cloud product or service has passed the FedRAMP process or got a FedRAMP provisional authorization. FedRAMP authorization package means the core information an agency uses to decide on authorizing a cloud service or common controls. FedRAMP Board means the board under section 3610. Independent assessment service means a third party accredited by the Administrator to evaluate cloud providers and their products or services. Secretary means the Secretary of Homeland Security.