§3614 Roles and Responsibilities of the Office of Management and Budget

Summary

The Director must publish guidance, working with the Administrator and the Secretary, that says which cloud products and services are covered by FedRAMP, requires agencies to get FedRAMP authorization when those products are used as Federal information systems, and tries to include all needed cloud products and services. The Director must also give guidance on extra FedRAMP and FedRAMP Board duties to speed safe cloud adoption, set up with the Administrator a regular review process for FedRAMP authorization packages so secure services can be reused, oversee how well FedRAMP and the FedRAMP Board work (including the Board’s duties in section 3610(d)), and, as much as possible, promote consistent assessment, authorization, adoption, and use of secure cloud services across agencies.