United States 117th Congress Status: In Committee 1 D cosponsors

S 3408 — Federal Cloud Risk Management Improvements Act

Last action — Read twice and referred to the Committee on Homeland Security and Governmental Affairs.

Track this bill free

No card. One bill, free forever — alerts when it moves.

  1. ✓
    Introduced
  2. 2
    In Committee
  3. 3
    Passed Senate
  4. 4
    Passed House
  5. 5
    To Executive
  6. 6
    Enacted

This bill died with 117th Congress. It reached “In Committee” and never advanced before the session ended, so it can no longer move — a new version would have to be reintroduced in the current session.

This bill is no longer active — its legislative session has ended, so there is no live prognosis. It would have to be reintroduced in the current session to move again.

Summary

Federal Cloud Risk Management Improvements Act This bill requires the General Services Administration to submit to Congress a report that includes a review of measures taken under the Federal Risk and Authorization Management Program, or any successor program, to ensure the security of data stored or processed by cloud service providers.

Bill Text

How this bill changes current law

2 changes Share ↗

AI-generated reading aid from the bill's amendatory text — verify against the official bill.

The bill adds a new section to require annual reporting on the security of cloud computing products and services.

  • 44 U.S.C. 3607

    ``Sec. 3607. Reporting regarding security of cloud computing products and services ``(a) Definitions.--In this section: ``(1) Agency.--The term `agency' has the meaning given the term in section 3502. ``(2) Cloud computing.--The term `cloud computing' has the meaning given the term in Special Publication 800-145 of the National Institute of Standards and Technology, or any successor document. ``(3) Cloud service provider.--The term `cloud service provider' means an entity offering cloud computing products or services to agencies. ``(b) Reporting.--Not later than 1 year after the date of enactment of this section, and annually thereafter, the Administrator of General Services shall submit to the Committee on Homeland Security and Governmental Affairs of the Senate and the Committee on Oversight and Reform of the House of Representatives a report that includes a review of measures taken under the Federal Risk and Authorization Management Program, or any successor thereto, to ensure the security of data stored or processed by cloud service providers, which may include-- ``(1) geolocation restrictions for provided products or services; ``(2) disclosures of foreign elements of supply chains of acquired products or services; ``(3) regular disclosures of ownership of cloud service providers by foreign entities; and ``(4) encryption requirements for data processed, stored, or transmitted by cloud service providers.''.

    This establishes a new requirement for reporting on the security of cloud computing services utilized by government agencies.

  • 44 U.S.C. 3607

    ``3607. Reporting regarding security of cloud computing products and services.''.

    This adds a new entry to the table of sections in chapter 36, listing the newly created section on cloud computing security reporting.

Action History

  1. Introduced in Senate

  2. Read twice and referred to the Committee on Homeland Security and Governmental Affairs.

Sponsors

Sponsorship breakdown

Export CSV (upgrade) →

1 sponsors · 0 co-sponsors · 546 not signed on

Sponsors (1)

Co-sponsors (0)

None.

Not signed on (546)

546 members have not signed on to this bill.

Show all 546 →

"Not signed on" means a member has not sponsored or co-sponsored this bill — it does not imply opposition. Members flagged Voted No have a recorded No vote on this bill.

Whip count is in markup. Polling the chamber and every recorded vote this session. Only the first open is slow. It’s instant for you after this. Calling the roll · Tallying · Engrossing

Subjects

technology
Cross-referencing the record. Reading this bill against every other bill in the corpus by meaning, not keywords. Only the first open is slow. It’s instant for you after this. Matching · Ranking · Engrossing

Frequently asked questions

What does S 3408 do?
Federal Cloud Risk Management Improvements Act This bill requires the General Services Administration to submit to Congress a report that includes a review of measures taken under the Federal Risk and Authorization Management Program, or any successor program, to ensure the security of data stored or processed by cloud service providers.
Who sponsors S 3408?
S 3408 is sponsored by Ossoff, Jon (Democratic).
What is the current status of S 3408?
This bill died with 117th Congress. It reached “In Committee” and never advanced before the session ended, so it can no longer move — a new version would have to be reintroduced in the current session.
Where can I track S 3408?
Track S 3408 free on One Click Politics — get push/email alerts when it moves.

Make your voice heard on S 3408

Find the representatives who decide this bill and tell them where you stand — for yourself, or mobilize your whole list in one click with One Click Politics advocacy software.

Find my representatives → Run a campaign

Stay ahead of S 3408

Last checked for changes 3 months ago · updated continuously

One Click Politics tracks every bill in Congress and all 50 states.

Track this bill →