---
kind: "section"
citation: "44 U.S.C. § 3608"
title: "44"
title_heading: "Public Printing and Documents"
number: "3608"
heading: "Federal risk and authorization management program"
release: "119-102"
date: "2026-07-12"
url: "https://uscodex.org/usc/44/3608"
units:
  - "Chapter 36 — Management and Promotion of Electronic Government Services"
---

# §3608. Federal risk and authorization management program


There is established within the General Services Administration the Federal Risk and Authorization Management Program. The [Administrator](/usc/44/3601.md?p=1), subject to [section 3614](/usc/44/3614.md), shall establish a Government-wide program that provides a standardized, reusable approach to security assessment and authorization for [cloud computing](/usc/44/3607.md?p=b-4) products and services that process unclassified information used by agencies.


## Source credit

(Added Pub. L. 117–263, div. E, title LIX, § 5921(b), Dec. 23, 2022, 136 Stat. 3450.)

## Notes

### Repeal of Section

For repeal of section by section 5921(d)(1) of Pub. L. 117–263, see Effective Date of Repeal note below.

### Statutory Notes and Related Subsidiaries

### Effective Date of Repeal

Pub. L. 117–263, div. E, title LIX, § 5921(d)(1), Dec. 23, 2022, 136 Stat. 3458, provided that the repeal of this section is effective on the date that is 5 years after Dec. 23, 2022.

### Construction

For rule of construction regarding section 5921 of Pub. L. 117–263, see section 5921(e) of Pub. L. 117–263, set out as a note under section 3607 of this title.