44 U.S.C. § 3615: Reports to Congress; GAO report

During the preceding year, the status, efficiency, and effectiveness of the General Services Administration under section 3609 and agencies under section 3613 and in supporting the speed, effectiveness, sharing, reuse, and security of authorizations to operate for secure cloud computing products and services. Progress towards meeting the metrics required under section 3609(d). Data on FedRAMP authorizations. The average length of time to issue FedRAMP authorizations. The number of FedRAMP authorizations submitted, issued, and denied for the preceding year. A review of progress made during the preceding year in advancing automation techniques to securely automate FedRAMP processes and to accelerate reporting under this section. The number and characteristics of authorized cloud computing products and services in use at each agency consistent with guidance provided by the Director under section 3614. geolocation restrictions for provided products or services; disclosures of foreign elements of supply chains of acquired products or services; continued disclosures of ownership of cloud service providers by foreign entities; and encryption for data processed, stored, or transmitted by cloud service providers. The costs incurred by agencies and cloud service providers relating to the issuance of FedRAMP authorizations. The extent to which agencies have processes in place to continuously monitor the implementation of cloud computing products and services operating as Federal information systems. How often and for which categories of products and services agencies use FedRAMP authorizations. The unique costs and potential burdens incurred by cloud computing companies that are small business concerns (as defined in section 3(a) of the Small Business Act ( 15 U.S.C. 632(a) ) as a part of the FedRAMP authorization process.