United States of America: Passed FedRAMP Authorization Act through incorporation into the National Defense Authorization Act for Fiscal Year 2023

On 8 December 2022, the US House of Representatives passed the “National Defense Authorization Act for Fiscal Year 2023”, which, in its compromise form, would include a section that would amend the Federal Risk and Authorization Management Program (FedRAMP), a government program that regulates the cybersecurity certification that cloud service providers are required to obtain to manage US government data. In particular, the Act would allow tools certified by FedRAMP to be used in an agency without additional verification. Further, the Act creates a cloud advisory committee with representatives from cloud services companies.