Notice: The uscode.house.gov website is currently operating in a temporary format. While the United States Code remains available from its authoritative source, some website features and functionality are temporarily unavailable.
The United States Code Online is current through Public Law 119-121 (October 9, 2026).
Search & Browse Currency and Updating Classification Tables Popular Name Tool Positive Law Codification Editorial Reclassification Downloads
44 U.S.C. 3608: Federal risk and authorization management programText contains those laws in effect through Public Law 119-121 (October 9, 2026).
From Title 44-PUBLIC PRINTING AND DOCUMENTSCHAPTER 36-MANAGEMENT AND PROMOTION OF ELECTRONIC GOVERNMENT SERVICES
Jump To: Source CreditRepeal of SectionStatutory Notes and Related SubsidiariesEffective DateMiscellaneous

§3608. Federal risk and authorization management program

There is established within the General Services Administration the Federal Risk and Authorization Management Program. The Administrator, subject to section 3614, shall establish a Government-wide program that provides a standardized, reusable approach to security assessment and authorization for cloud computing products and services that process unclassified information used by agencies.

(Added Pub. L. 117-263, div. E, title LIX, § 5921(b) , Dec. 23, 2022 , 136 Stat. 3450 .)

Repeal of Section

For repeal of section by section 5921(d)(1) of Pub. L. 117-263, see Effective Date of Repeal note below.

Statutory Notes and Related Subsidiaries

Effective Date of Repeal

Pub. L. 117-263, div. E, title LIX, § 5921(d)(1), Dec. 23, 2022, 136 Stat. 3458, provided that the repeal of this section is effective on the date that is 5 years after Dec. 23, 2022.

Construction

For rule of construction regarding section 5921 of Pub. L. 117-263, see section 5921(e) of Pub. L. 117-263, set out as a note under section 3607 of this title.