<?xml version="1.0" encoding="UTF-8"?><BillSummaries>
<item congress="116" measure-type="hr" measure-number="3941" measure-id="id116hr3941" originChamber="HOUSE" orig-publish-date="2019-07-24" update-date="2020-02-14">
<title>FedRAMP Authorization Act</title>
<summary summary-id="id116hr3941v53" currentChamber="HOUSE" update-date="2020-02-14">
<action-date>2020-02-05</action-date>
<action-desc>Passed House</action-desc>
<summary-text><![CDATA[<p><b>Federal Risk and Authorization Management Program Authorization Act of 2019 or the FedRAMP Authorization Act</b></p> <p>This bill provides statutory authority for the Federal Risk and Authorization Management Program (FedRAMP) within the General Services Administration (GSA).</p> <p>The GSA must establish a government-wide program that provides the authoritative standardized approach to security assessment and authorization for cloud computing products and services that process unclassified information used by agencies. Agencies must ensure that their cloud computing services meet GSA requirements.</p> <p>The bill establishes the Joint Authorization Board to conduct security assessments of cloud computing services and issue provisional authorizations to operate to cloud service providers that meet FedRAMP security guidelines.</p> <p>The GSA shall (1) determine the requirements for certification of independent assessment organizations, and (2) establish the Federal Secure Cloud Advisory Committee.</p>]]></summary-text>
</summary>
<summary summary-id="id116hr3941v00" currentChamber="HOUSE" update-date="2020-02-10">
<action-date>2019-07-24</action-date>
<action-desc>Introduced in House</action-desc>
<summary-text><![CDATA[<p><b>Federal Risk and Authorization Management Program Authorization Act of 2019 or the FedRAMP Authorization Act</b></p> <p>This bill provides statutory authority for the Federal Risk and Authorization Management Program (FedRAMP) within the General Services Administration (GSA).</p> <p>The GSA must establish a government-wide program that provides the authoritative standardized approach to security assessment and authorization for cloud computing products and services that process unclassified information used by agencies. Agencies must ensure that their cloud computing services meet GSA requirements.</p> <p>The bill establishes the Joint Authorization Board to conduct security assessments of cloud computing services and issue provisional authorizations to operate to cloud service providers that meet FedRAMP security guidelines.</p> <p>The GSA shall (1) determine the requirements for certification of independent assessment organizations, and (2) establish the Federal Secure Cloud Advisory Committee.</p>]]></summary-text>
</summary>
</item>
<dublinCore xmlns:dc="http://purl.org/dc/elements/1.1/">
<dc:format>text/xml</dc:format>
<dc:language>EN</dc:language>
<dc:rights>Pursuant to Title 17 Section 105 of the United States Code, this file is not subject to copyright protection and is in the public domain.</dc:rights>
<dc:contributor>Congressional Research Service, Library of Congress</dc:contributor>
<dc:description>This file contains bill summaries for federal legislation. A bill summary describes the most significant provisions of a piece of legislation and details the effects the legislative text may have on current law and federal programs. Bill summaries are authored by the Congressional Research Service (CRS) of the Library of Congress. As stated in Public Law 91-510 (2 USC 166 (d)(6)), one of the duties of CRS is "to prepare summaries and digests of bills and resolutions of a public general nature introduced in the Senate or House of Representatives". For more information, refer to the User Guide that accompanies this file.</dc:description>
</dublinCore>
</BillSummaries>
