---
tags:
  - FedRAMP
  - Legal Authority
picto:
  source: person
---

<span class="picto">:lucide-person-standing:{ .person title="This content was written by a human just for this page." }</span>

# FedRAMP Authorization Act

!!! abstract "The Statutory Establishment of FedRAMP"

    FedRAMP was established on **December 23, 2022** in Subtitle I, Title LIX, Subtitle C, Section 5921 of
    [Public Law 117-263 - James M. Inhofe National Defense Authorization Act for Fiscal Year 2023](https://www.govinfo.gov/app/details/PLAW-117publ263). This law amended Chapter 36 of Title 44 of the United States Code.

    As required in Section 3614 of this Act, OMB Memorandum M-24-15 was published on **July 25, 2024** to guide government-wide implementation. This Memorandum formally rescinded and replaced FedRAMP in its entirety, effectively creating a new program with the same name but an entirely different set of authority and responsibilities.

!!! info "Minor Modifications for Readability"

    The text of the FedRAMP Authorization Act shown on this site has been modified slightly
    for readability. No material content or words have been changed.

---

## SEC. 5921. FEDRAMP AUTHORIZATION ACT

### (a) Short Title

This section may be cited as the FedRAMP Authorization Act.

### (b) Amendment

Chapter 36 of title 44, United States Code, is amended by adding at the end the
following:

---

- [Sec. 3607. Definitions](definitions.md)

- [Sec. 3608. Federal Risk and Authorization Management Program](gsa.md)

- [Sec. 3609. Roles and responsibilities of the General Services Administration](gsa.md)

- [Sec. 3610. FedRAMP Board](board.md)

- [Sec. 3611. Independent assessment](assessment.md)

- [Sec. 3612. Declaration of foreign interests](assessment.md)

- [Sec. 3613. Roles and responsibilities of agencies](agencies.md)

- [Sec. 3614. Roles and responsibilities of the Office of Management and Budget](omb.md)

- [Sec. 3615. Reports to Congress; GAO report](reports.md)

- [Sec. 3616. Federal Secure Cloud Advisory Committee](fscac.md)

---

### \(c) Technical and Conforming Amendment

The table of sections for chapter 36 of title 44, United States Code, is amended
by adding at the end the following new items:

3607. Definitions.

3608. Federal Risk and Authorization Management Program.

3609. Roles and responsibilities of the General Services Administration.

3610. FedRAMP Board.

3611. Independent assessment.

3612. Declaration of foreign interests.

3613. Roles and responsibilities of agencies.

3614. Roles and responsibilities of the Office of Management and Budget.

3615. Reports to Congress; GAO report.

3616. Federal Secure Cloud Advisory Committee.

### (d) Sunset

#### (1) In general

Effective on the date that is 5 years after the date of enactment of this Act,
chapter 36 of title 44, United States Code, is amended by striking sections 3607
through 3616.

#### (2) Conforming amendment

Effective on the date that is 5 years after the date of enactment of this Act,
the table of sections for chapter 36 of title 44, United States Code, is amended
by striking the items relating to sections 3607 through 3616.

### (e) Rule of Construction

Nothing in this section or any amendment made by this section shall be construed
as altering or impairing the authorities of the Director of the Office of
Management and Budget or the Secretary of Homeland Security under subchapter II
of chapter 35 of title 44, United States Code.
