FedRAMP Authorization Act

Bill: 116-hr-3941
Sponsor: Rep. Connolly, Gerald E. [D-VA-11]
Introduced: 2019-07-24 in the House
Policy area: Government Operations and Politics
Subjects: Administrative law and regulatory procedures
Advisory bodies
Computer security and identity theft
Congressional oversight
General Services Administration
Government employee pay, benefits, personnel management
Government information and archives
Government studies and investigations
Intergovernmental relations
Internet and video services
Internet, web applications, social media
Public participation and lobbying

Summary:
action_date: 2019-07-24
text: 

Federal Risk and Authorization Management Program Authorization Act of 2019 or the FedRAMP Authorization Act

 
This bill provides statutory authority for the Federal Risk and Authorization Management Program (FedRAMP) within the General Services Administration (GSA).
 
The GSA must establish a government-wide program that provides the authoritative standardized approach to security assessment and authorization for cloud computing products and services that process unclassified information used by agencies. Agencies must ensure that their cloud computing services meet GSA requirements.
 
The bill establishes the Joint Authorization Board to conduct security assessments of cloud computing services and issue provisional authorizations to operate to cloud service providers that meet FedRAMP security guidelines.
 
The GSA shall (1) determine the requirements for certification of independent assessment organizations, and (2) establish the Federal Secure Cloud Advisory Committee.

action_date: 2020-02-05
text: 

Federal Risk and Authorization Management Program Authorization Act of 2019 or the FedRAMP Authorization Act

 
This bill provides statutory authority for the Federal Risk and Authorization Management Program (FedRAMP) within the General Services Administration (GSA).
 
The GSA must establish a government-wide program that provides the authoritative standardized approach to security assessment and authorization for cloud computing products and services that process unclassified information used by agencies. Agencies must ensure that their cloud computing services meet GSA requirements.
 
The bill establishes the Joint Authorization Board to conduct security assessments of cloud computing services and issue provisional authorizations to operate to cloud service providers that meet FedRAMP security guidelines.
 
The GSA shall (1) determine the requirements for certification of independent assessment organizations, and (2) establish the Federal Secure Cloud Advisory Committee.


Legislative actions:
action_date: 2020-02-10
text: Received in the Senate and Read twice and referred to the Committee on Homeland Security and Governmental Affairs.
action_date: 2020-02-05
text: Motion to reconsider laid on the table Agreed to without objection.
action_date: 2020-02-05
text: On motion to suspend the rules and pass the bill, as amended Agreed to by voice vote. (text: CR H815-817)
action_date: 2020-02-05
text: Passed/agreed to in House: On motion to suspend the rules and pass the bill, as amended Agreed to by voice vote.
action_date: 2020-02-05
text: DEBATE - The House proceeded with forty minutes of debate on H.R. 3941.
action_date: 2020-02-05
text: Considered under suspension of the rules. (consideration: CR H815-819)
action_date: 2020-02-05
text: Mrs. Maloney, Carolyn B. moved to suspend the rules and pass the bill, as amended.
action_date: 2020-02-05
text: Placed on the Union Calendar, Calendar No. 315.
action_date: 2020-02-05
text: Reported (Amended) by the Committee on Oversight and Reform. H. Rept. 116-391.
action_date: 2020-02-05
text: Reported (Amended) by the Committee on Oversight and Reform. H. Rept. 116-391.
action_date: 2019-12-19
text: Committee Consideration and Mark-up Session Held.
action_date: 2019-07-24
text: Referred to the House Committee on Oversight and Reform.
action_date: 2019-07-24
text: Introduced in House
action_date: 2019-07-24
text: Introduced in House