44 U.S.C. § 3608

Federal risk and authorization management program

There is established within the General Services Administration the Federal Risk and Authorization Management Program. The Administrator, subject to section 3614, shall establish a Government-wide program that provides a standardized, reusable approach to security assessment and authorization for cloud computing products and services that process unclassified information used by agencies.

(Added Pub. L. 117–263, div. E, title LIX, § 5921(b) , Dec. 23, 2022 , 136 Stat. 3450 .)