---
tags:
  - FedRAMP
  - Legal Authority
picto:
  source: person
---

<span class="picto">:lucide-person-standing:{ .person title="This content was written by a human just for this page." }</span>

# FedRAMP Authorization Act on OMB

!!! abstract "OMB Memorandum M-24-15"

    The guidance required by this section is published as OMB Memorandum [M-24-15](../m-24-15/index.md).

## Sec. 3614. Roles and responsibilities of the Office of Management and Budget

The Director **shall**–

1. in consultation with the Administrator and the Secretary, issue guidance that:

    <ul>
    (A) specifies the categories or characteristics of cloud computing products and services that are within the scope of FedRAMP;

    (B) includes requirements for agencies to obtain a FedRAMP authorization when operating a cloud computing product or service described in subparagraph (A) as a Federal information system; and

    (C) encompasses, to the greatest extent practicable, all necessary and appropriate cloud computing products and services;
    </ul>

2. issue guidance describing additional responsibilities of FedRAMP and the FedRAMP Board to accelerate the adoption of secure cloud computing products and services by the Federal Government;

3. in consultation with the Administrator, establish a process to periodically review FedRAMP authorization packages to support the secure authorization and reuse of secure cloud products and services;

4. oversee the effectiveness of FedRAMP and the FedRAMP Board, including the compliance by the FedRAMP Board with the duties described in section 3610(d); and

5. to the greatest extent practicable, encourage and promote consistency of the assessment, authorization, adoption, and use of secure cloud computing products and services within and across agencies.

