GSA Delegations of Authority (FedRAMP)

Purpose:

This directive announces a delegation of authority to the FAS Commissioner, FAS Deputy Commissioner/TTS Director, and FedRAMP Director to carry out GSA’s responsibilities under the FedRAMP Authorization Act.

Cancellation:

None.

Background:

The President signed the FedRAMP Authorization Act as part of the FY23 National Defense Authorization Act. The FedRAMP Authorization Act codifies the FedRAMP program as the authoritative standardized approach to security assessment and authorization for cloud computing products and services that process unclassified federal information. The statutory language assigns the GSA Administrator with certain roles, responsibilities, and authorities. Consequently, delegating authority to the FAS Commissioner, FAS Deputy Commissioner/TTS Director, and FedRAMP Director is essential to ensure the effective execution of GSA’s responsibilities under the FedRAMP Authorization Act.

Delegation of Authority:

I hereby delegate authority to the FAS Commissioner, FAS Deputy Commissioner/TTS Director, and the FedRAMP Director to administer the FedRAMP program and carry out GSA’s duties and responsibilities under the FedRAMP Authorization Act and other related directives (44 U.S.C. §§ 3607 - 3615, and any other specific legal authority related to the action).

Implementing Actions:

a. The changes outlined in this Delegation of Authority become effective upon signature.

b. The officials designated in this Order, in conjunction with other appropriate officials, shall take all necessary actions to implement this order. The GSA Delegations of Authority Manual will be updated at a later date.