{"identifier":"/us/usc/t44/s3607","title":44,"num":"\u00a7\u202f3607.","heading":"Definitions","text":"\u00a7\u202f3607.\nDefinitions\n(a)\nIn General.\u2014\nExcept as provided under subsection (b), the definitions under sections 3502 and 3552 apply to this section through section 3616.\n(b)\nAdditional Definitions.\u2014\nIn this section through section 3616:\n(1)\nAdministrator.\u2014\nThe term \u201cAdministrator\u201d means the Administrator of General Services.\n(2)\nAppropriate congressional committees.\u2014\nThe term \u201cappropriate congressional committees\u201d means the Committee on Homeland Security and Governmental Affairs of the Senate and the Committee on Oversight and Reform of the House of Representatives.\n(3)\nAuthorization to operate; federal information.\u2014\nThe terms \u201cauthorization to operate\u201d and \u201cFederal information\u201d have the meaning given those term\n1\n1 So in original. Probably should be \u201cterms\u201d.\n(4)\nCloud computing.\u2014\nThe term \u201ccloud computing\u201d has the meaning given the term in Special Publication 800\u2013145 of the National Institute of Standards and Technology, or any successor document.\n(5)\nCloud service provider.\u2014\nThe term \u201ccloud service provider\u201d means an entity offering cloud computing products or services to agencies.\n(6)\nFedRAMP.\u2014\nThe term \u201cFedRAMP\u201d means the Federal Risk and Authorization Management Program established under section 3608.\n(7)\nFedRAMP authorization.\u2014\nThe term \u201cFedRAMP authorization\u201d means a certification that a cloud computing product or service has\u2014\n(A) completed a FedRAMP authorization process, as determined by the Administrator; or\n(B) received a FedRAMP provisional authorization to operate, as determined by the FedRAMP Board.\n(8)\nFedramp authorization package.\u2014\nThe term \u201cFedRAMP authorization package\u201d means the essential information that can be used by an agency to determine whether to authorize the operation of an information system or the use of a designated set of common controls for all cloud computing products and services authorized by FedRAMP.\n(9)\nFedRAMP board.\u2014\nThe term \u201cFedRAMP Board\u201d means the board established under section 3610.\n(10)\nIndependent assessment service.\u2014\nThe term \u201cindependent assessment service\u201d means a third-party organization accredited by the Administrator to undertake conformity assessments of cloud service providers and the products or services of cloud service providers.\n(11)\nSecretary.\u2014\nThe term \u201cSecretary\u201d means the Secretary of Homeland Security.","url":"https://projectusc.org/usc/t44/s3607.html","content":[{"t":"sec","id":"/us/usc/t44/s3607","children":[{"t":"num","text":"\u00a7\u202f3607."},{"t":"heading","text":"Definitions"},{"t":"subsec","id":"/us/usc/t44/s3607/a","children":[{"t":"num","text":"(a)"},{"t":"heading","text":"In General.\u2014"},{"t":"content","text":"Except as provided under subsection (b), the definitions under sections 3502 and 3552 apply to this section through section 3616.","tail":"\n"}],"tail":"\n"},{"t":"subsec","id":"/us/usc/t44/s3607/b","children":[{"t":"num","text":"(b)"},{"t":"heading","text":"Additional Definitions.\u2014"},{"t":"chapeau","text":"In this section through section 3616:"},{"t":"para","id":"/us/usc/t44/s3607/b/1","children":[{"t":"num","text":"(1)"},{"t":"heading","text":"Administrator.\u2014"},{"t":"content","text":"The term \u201cAdministrator\u201d means the Administrator of General Services.","tail":"\n"}],"tail":"\n"},{"t":"para","id":"/us/usc/t44/s3607/b/2","children":[{"t":"num","text":"(2)"},{"t":"heading","text":"Appropriate congressional committees.\u2014"},{"t":"content","text":"The term \u201cappropriate congressional committees\u201d means the Committee on Homeland Security and Governmental Affairs of the Senate and the Committee on Oversight and Reform of the House of Representatives.","tail":"\n"}],"tail":"\n"},{"t":"para","id":"/us/usc/t44/s3607/b/3","children":[{"t":"num","text":"(3)"},{"t":"heading","text":"Authorization to operate; federal information.\u2014"},{"t":"content","text":"The terms \u201cauthorization to operate\u201d and \u201cFederal information\u201d have the meaning given those term\u202f","children":[{"t":"ref","text":"1"},{"t":"num","text":"1","tail":"\u202fSo in original. Probably should be \u201cterms\u201d."},{"t":"text","text":"\u202fSo in original. Probably should be \u201cterms\u201d.","tail":" in Circular A\u2013130 of the Office of Management and Budget entitled \u201cManaging Information as a Strategic Resource\u201d, or any successor document."}],"tail":"\n"}],"tail":"\n"},{"t":"para","id":"/us/usc/t44/s3607/b/4","children":[{"t":"num","text":"(4)"},{"t":"heading","text":"Cloud computing.\u2014"},{"t":"content","text":"The term \u201ccloud computing\u201d has the meaning given the term in Special Publication 800\u2013145 of the National Institute of Standards and Technology, or any successor document.","tail":"\n"}],"tail":"\n"},{"t":"para","id":"/us/usc/t44/s3607/b/5","children":[{"t":"num","text":"(5)"},{"t":"heading","text":"Cloud service provider.\u2014"},{"t":"content","text":"The term \u201ccloud service provider\u201d means an entity offering cloud computing products or services to agencies.","tail":"\n"}],"tail":"\n"},{"t":"para","id":"/us/usc/t44/s3607/b/6","children":[{"t":"num","text":"(6)"},{"t":"heading","text":"FedRAMP.\u2014"},{"t":"content","text":"The term \u201cFedRAMP\u201d means the Federal Risk and Authorization Management Program established under section 3608.","tail":"\n"}],"tail":"\n"},{"t":"para","id":"/us/usc/t44/s3607/b/7","children":[{"t":"num","text":"(7)"},{"t":"heading","text":"FedRAMP authorization.\u2014"},{"t":"chapeau","text":"The term \u201cFedRAMP authorization\u201d means a certification that a cloud computing product or service has\u2014"},{"t":"subpara","id":"/us/usc/t44/s3607/b/7/A","children":[{"t":"num","text":"(A)"},{"t":"content","text":" completed a FedRAMP authorization process, as determined by the Administrator; or","tail":"\n"}],"tail":"\n"},{"t":"subpara","id":"/us/usc/t44/s3607/b/7/B","children":[{"t":"num","text":"(B)"},{"t":"content","text":" received a FedRAMP provisional authorization to operate, as determined by the FedRAMP Board.","tail":"\n"}],"tail":"\n"}],"tail":"\n"},{"t":"para","id":"/us/usc/t44/s3607/b/8","children":[{"t":"num","text":"(8)"},{"t":"heading","text":"Fedramp authorization package.\u2014"},{"t":"content","text":"The term \u201cFedRAMP authorization package\u201d means the essential information that can be used by an agency to determine whether to authorize the operation of an information system or the use of a designated set of common controls for all cloud computing products and services authorized by FedRAMP.","tail":"\n"}],"tail":"\n"},{"t":"para","id":"/us/usc/t44/s3607/b/9","children":[{"t":"num","text":"(9)"},{"t":"heading","text":"FedRAMP board.\u2014"},{"t":"content","text":"The term \u201cFedRAMP Board\u201d means the board established under section 3610.","tail":"\n"}],"tail":"\n"},{"t":"para","id":"/us/usc/t44/s3607/b/10","children":[{"t":"num","text":"(10)"},{"t":"heading","text":"Independent assessment service.\u2014"},{"t":"content","text":"The term \u201cindependent assessment service\u201d means a third-party organization accredited by the Administrator to undertake conformity assessments of cloud service providers and the products or services of cloud service providers.","tail":"\n"}],"tail":"\n"},{"t":"para","id":"/us/usc/t44/s3607/b/11","children":[{"t":"num","text":"(11)"},{"t":"heading","text":"Secretary.\u2014"},{"t":"content","text":"The term \u201cSecretary\u201d means the Secretary of Homeland Security.","tail":"\n"}],"tail":"\n"}],"tail":"\n"},{"t":"text","text":"\n"},{"t":"text","text":"\n"}]}]}