United States of America: US National Defense Authorization Act 2023 including cybersecurity certification for cloud vendors

Progress

Current status
in grace period
23 Dec 2027 in force
23 Dec 2022 in grace period
15 Dec 2022 adopted
08 Dec 2022 under deliberation
04 Jan 2021 under deliberation

Scope

Implementers
United States of America
Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
infrastructure provider: cloud computing, storage and databases
Government Branch
legislature
Government Body
parliament
Implementation Level
national

Timeline of events

23 Dec 2027
in force

Implemented FedRAMP Authorization Act through incorporation into the National Defense Authorization Act for Fiscal Year 2023

On 23 December 2027, the Authorization Management Program (FedRAMP) is implemented, 5 years after its entry into force. The Act was incorporated into the National Defense Authorization Act for Fiscal Year 2023 (H.R.7776). The FedRAMP represents a go…

Source
Event type law
Action type implementation
Government branch legislature
Government body parliament
23 Dec 2022
in grace period

Entry into force with grace period of FedRAMP Authorization Act through incorporation into the National Defense Authorization Act for Fiscal Year 2023

On 23 December 2022, the Authorization Management Program (FedRAMP) entered not force with grace period after it was signed into law by the US President Joe Biden on the same day. The Act was incorporated into the National Defense Authorization Act …

Source
Event type law
Action type in force with grace period
Government branch legislature
Government body parliament
15 Dec 2022
adopted

Adopted FedRAMP Authorization Act through incorporation into the National Defense Authorization Act for Fiscal Year 2023

On 15 December 2022, the US Senate adopted the “National Defense Authorization Act for Fiscal Year 2023”, which includes a section that amending the Federal Risk and Authorization Management Program (FedRAMP), a government program that regulates the…

Source
Event type law
Action type adoption
Government branch legislature
Government body parliament
08 Dec 2022
under deliberation

Passed FedRAMP Authorization Act through incorporation into the National Defense Authorization Act for Fiscal Year 2023

On 8 December 2022, the US House of Representatives passed the “National Defense Authorization Act for Fiscal Year 2023”, which, in its compromise form, would include a section that would amend the Federal Risk and Authorization Management Program (…

Source
Event type law
Action type passage
Government branch legislature
Government body parliament
04 Jan 2021
under deliberation

Introduction of FedRAMP Authorization Act aiming to enhance cloud computing in government

The FedRAMP Authorization Act is introduced, aiming to enhance the innovation, security, and availability of cloud computing products and services used in the Federal Government. In particular, the Act establishes the Federal Risk and Authorization …

Source
Event type law
Action type introduction
Government branch legislature
Government body parliament