Us Code § 3615 - Reports to Congress; GAO report
Full text of Us Code United States Code § 3615 — Reports to Congress; GAO report, with citation guidance and answers to common questions.
§ 3615. Reports to Congress; GAO report
(a)
(1) During the preceding year, the status, efficiency, and effectiveness of the General Services Administration under section 3609 and agencies under section 3613 and in supporting the speed, effectiveness, sharing, reuse, and security of authorizations to operate for secure cloud computing products and services.
(2) Progress towards meeting the metrics required under section 3609(d).
(3) Data on FedRAMP authorizations.
(4) The average length of time to issue FedRAMP authorizations.
(5) The number of FedRAMP authorizations submitted, issued, and denied for the preceding year.
(6) A review of progress made during the preceding year in advancing automation techniques to securely automate FedRAMP processes and to accelerate reporting under this section.
(7) The number and characteristics of authorized cloud computing products and services in use at each agency consistent with guidance provided by the Director under section 3614.
(8) A review of FedRAMP measures to ensure the security of data stored or processed by cloud service providers, which may include—
(A) geolocation restrictions for provided products or services;
(B) disclosures of foreign elements of supply chains of acquired products or services;
(C) continued disclosures of ownership of cloud service providers by foreign entities; and
(D) encryption for data processed, stored, or transmitted by cloud service providers.
(b)
(1) The costs incurred by agencies and cloud service providers relating to the issuance of FedRAMP authorizations.
(2) The extent to which agencies have processes in place to continuously monitor the implementation of cloud computing products and services operating as Federal information systems.
(3) How often and for which categories of products and services agencies use FedRAMP authorizations.
(4) The unique costs and potential burdens incurred by cloud computing companies that are small business concerns (as defined in section 3(a) of the Small Business Act (15 U.S.C. 632(a)) as a part of the FedRAMP authorization process.
(Added Pub. L. 117–263, div. E, title LIX, §5921(b), Dec. 23, 2022, 136 Stat. 3455.)
Repeal of Section
For repeal of section by section 5921(d)(1) of Pub. L. 117–263, see Effective Date of Repeal note below.
Editorial Notes
References in Text
The date of enactment of this section, referred to in text, is the date of enactment of Pub. L. 117–263, which was approved Dec. 23, 2022.
Statutory Notes and Related Subsidiaries
Effective Date of Repeal
Pub. L. 117–263, div. E, title LIX, §5921(d)(1), Dec. 23, 2022, 136 Stat. 3458, provided that the repeal of this section is effective on the date that is 5 years after Dec. 23, 2022.
Construction
For rule of construction regarding section 5921 of Pub. L. 117–263, see section 5921(e) of Pub. L. 117–263, set out as a note under section 3607 of this title.
About This Section
44 U.S.C. § 3615 is part of Title 44 of the United States Code. The United States Code is the official codification of federal statutes maintained by the Office of the Law Revision Counsel of the U.S. House of Representatives. Congress amends the Code through new public laws, which are eventually incorporated into the relevant title.
This section may be cited in legal writing as 44 U.S.C. § 3615. For the most current official text, including any recent amendments, use the official source links below. Do not rely on this page as the sole authority for legal citation or litigation.
How to Read This Statute
Statutes are organized by title, chapter, section, and subsection. Pay attention to words like "shall," "may," "and," and "or," because they determine whether a requirement is mandatory or permissive and whether multiple conditions must all be met. Historical notes and amendments often appear at the end of a section.
Using This Page
This page is intended for research and educational use. Lawyers, students, journalists, and compliance professionals can use it as a starting point, but should always verify the current text through an official government source before relying on it for legal advice, filings, or compliance decisions.