An official website of the United States government
Here’s how you know
Official websites use .gov
A .gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS
A lock
( )
or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
To inform its exercise of oversight and statutory responsibilities, OMB seeks input regarding specific challenges and opportunities related to the Federal Risk and Authorization Management Program. In particular, OMB is looking for meaningful feedback from Federal Secure Cloud Advisory Committee members on improving FedRAMP’s effectiveness at ensuring agile and secure use of the commercial cloud by the Federal Government.
FedRAMP was established in 2011 by the Office of Management and Budget to safely accelerate the adoption of cloud services by federal agencies, and to help those agencies avoid duplicating effort by offering a consistent and reusable authorization process. Since its establishment, FedRAMP has operated by partnering with agencies and third-party assessors to identify appropriate cloud services, evaluate those services against a common baseline of security controls, and create authorization packages that enable agency authorizing officials to more easily make informed risk-based decisions concerning the use of those cloud services.
At the beginning of the FedRAMP program, the federal government had a significant focus on securely facilitating use of large-scale commercial Infrastructure-as-a-Service providers, which offer virtualized computing resources that are natively designed to be more scalable and automatable than traditional data center environments. In the years since, the commercial cloud marketplace has grown, especially in the area of Software-as-a-Service). The COVID-19 pandemic further accelerated the growth of the SaaS market, as shifts in the workplace landscape led more organizations relying on remote collaboration tools for their workforce and expanding the online services they provide to their customers.
Recognizing the value that FedRAMP has provided to Federal agencies and to industry, but with the clear need to update the program in response to a changing industry and offerings landscape, Congress passed the FedRAMP Authorization Act in December 2022 as part of the annual Defense Authorization Act. As part of that legislation, OMB is tasked with issuing “guidance describing additional responsibilities of FedRAMP and the FedRAMP Board to accelerate the adoption of secure cloud computing products and services by the Federal Government.”
The purpose of the FedRAMP program is to increase the Federal adoption of cloud services, while focusing cloud providers and agencies on the highest value work and eliminating redundant authorization and continuous monitoring efforts.
To achieve the above, OMB wants to grow the FedRAMP marketplace, simplify the process for industry and agencies alike, promote effective risk-management, and leverage opportunities to incorporate automation into the FedRAMP process. Automating key components of the FedRAMP enables acceleration of the timelines to achieve authorization, promote re-use, as well as opens doors to future continuous monitoring capabilities to enable effective and timely risk-management.
Ultimately, OMB believes FedRAMP should be able to grow the FedRAMP marketplace to include thousands of different cloud-based services over time, accelerating key agency operations while allowing agencies to directly manage smaller IT footprints and better focus resources on their core missions.
Specific areas where OMB is seeking input to expand opportunities and address challenges surrounding the FedRAMP program
OMB requests that FSCAC members review this paper ahead of the meeting and welcomes verbal responses members have to any of the questions during the meeting.
Governance and Authorizations. FedRAMP has been governed by a Joint Authorization Board (JAB) consisting of representatives from DHS, DoD, and GSA. Each of these agencies has established an internal program office, led by technical representatives, to perform key FedRAMP functions. These functions include reviewing authorization packages, conducting continuous monitoring, and reviewing FedRAMP procedure documents, among many other activities. The JAB approves each provisional authorization issued to an individual cloud service provider, and each JAB member has a team that supports ongoing review and monitoring processes on a per-CSP basis.
The FedRAMP Authorization Act establishes a FedRAMP Board, replacing the JAB, that includes representatives from DHS, DOD, and GSA and up to four additional members. In line with the Act, OMB is looking at expanding the Board to enhance agency representation and better integrate the program with the Federal community.
The FedRAMP Program supports multiple forms of authorizations to promote reusability while accommodating different Federal Government use cases. An important priority (and challenge) of the FedRAMP program is to support flexibility while promoting reuse and maintaining a general trust in any authorization associated with FedRAMP.
Therefore, OMB is considering adjustments to the FedRAMP authorization model, with the goal of having all FedRAMP authorizations held to a well-understood set of security principles, and creating more efficiency in authorizations issued jointly by multiple agencies. More generally, the FedRAMP program is expected to consider feedback from industry and agencies on where improvements can be made, including new authorization structures. To assist the program in those efforts, OMB is seeking input responsive to the following questions:
Scope and Applicability. FedRAMP is broadly intended – in statute and in its original OMB mandate – to standardize Federal agencies’ approach to using commercial cloud. However, cloud products (especially SaaS) have become more diverse over time, so it is not always clear within the Federal environment how to consistently and appropriately apply FedRAMP requirements. This uncertainty can result in differing formal or de facto policies across agencies, weakening the governmentwide consistency that FedRAMP is intended to promote. This dynamic can also cause agencies not to seek FedRAMP authorization for the use of a service that may merit one, or to require FedRAMP authorizations for services that either have negligible security impact or do not store Federal information.
OMB is considering how to determine and define which kinds of cloud-based services should be within the scope of FedRAMP.
Reciprocity and flexibility in compliance regimes. Today, FedRAMP relies on applying a baseline derived from the set of security controls described in NIST Special Publication 800-53, as well as generally applying other security requirements for Federal agencies, such as policies and directives issued by OMB and DHS’s Cybersecurity and Infrastructure Security Agency (CISA).
OMB is seeking feedback on the appropriateness and efficacy of accepting security artifacts and assessments based on other widely used security frameworks and compliance regimes.
What industry or alternate security frameworks, if any, should the FedRAMP program consider leveraging to help accelerate and reduce the burden of obtaining a FedRAMP authorization? Should this differ depending on the type of FedRAMP authorization? How should the FedRAMP program consider potential gaps in mapping controls and security requirements between frameworks?
Automation. The use of automation throughout the FedRAMP lifecycle is essential to ensuring effective operations for both Federal government and industry partners. OMB is working with GSA counterparts to consider efforts to automate and streamline all parts of the FedRAMP authorization process including the development of security assessment plans, security assessment reports, and plans of action and milestones.
OMB and GSA are also collaborating to digitize and streamline additional documentation required of vendors, including small businesses. Determining the technical means to automate system security documentation, in addition to other FedRAMP processes, is a key component of the FedRAMP modernization efforts. Additionally, continued research of emerging technologies and state-of-the-industry practices will be necessary to future automation efforts in supporting program growth. Questions for discussion include:
Continuous monitoring. Agencies are required to conduct continuous monitoring activities on IT systems they use, including cloud services. Currently, cloud service products and services that are authorized by agencies and also have FedRAMP authorizations receive little continuous monitoring from the FedRAMP program office, with the JAB providing continuous monitoring support for offerings approved centrally through the JAB. With the focus on new and flexible authorization models for cloud products and services, OMB is seeking input on enabling FedRAMP to take a more direct posture in providing continuous monitoring of FedRAMP authorized offerings that will enable agency authorizing officials to make risk-based decisions.
Permitting third-party-led authorizations. OMB welcomes feedback on whether and how the Federal government could permit private sector third-party organizations to perform core authorization and assessment functions that today are performed by agency sponsors, the FedRAMP program, or the JAB.
For clarity, this proposal is not necessarily based on the current FedRAMP Third Party Assessment Authorizations (3PAO) process and would not necessarily involve the companies that currently function as 3PAOs. This prompt is intended to holistically consider what role the private sector could play in the FedRAMP authorization process to effectively assess the security of cloud services and accelerate core processes.
Error, The Per Diem API is not responding. Please try again later.
No results could be found for the location you've entered.
Rates for Alaska, Hawaii, and U.S. territories and possessions are set by the Department of Defense.
Rates for foreign countries are set by the Department of State.
Rates are available between 10/1/2022 and 09/30/2025.
The End Date of your trip can not occur before the Start Date.
Traveler reimbursement is based on the location of the work activities and not the accommodations, unless lodging is not available at the work activity, then the agency may authorize the rate where lodging is obtained.
Unless otherwise specified, the per diem locality is defined as "all locations within, or entirely surrounded by, the corporate limits of the key city, including independent entities located within those boundaries."
Per diem localities with county definitions shall include"all locations within, or entirely surrounded by, the corporate limits of the key city as well as the boundaries of the listed counties, including independent entities located within the boundaries of the key city and the listed counties (unless otherwise listed separately)."
When a military installation or Government - related facility(whether or not specifically named) is located partially within more than one city or county boundary, the applicable per diem rate for the entire installation or facility is the higher of the rates which apply to the cities and / or counties, even though part(s) of such activities may be located outside the defined per diem locality.
An SBA program that helps provide a level playing field for small businesses owned by socially and economically disadvantaged people or entities that meet the following eligibility requirements:
See Title 13 Part 124 of the Code of Federal Regulations for more information.
From 5 USC 5701(6), "continental United States" means the several states and the District of Columbia, but does not include Alaska or Hawaii.
A multiple-award IDIQ governmentwide acquisition contract offering complete and flexible IT solutions worldwide. A best-in-class GWAC and preferred governmentwide solution, Alliant 2 offers:
It provides best-value IT solutions to federal agencies, while strengthening chances in federal contracting for small businesses through subcontracting.
A dedicated, flexible fuel, or dual-fuel vehicle designed to operate on at least one alternative fuel.
An investment in our nation’s infrastructure and competitiveness. The law provides funding for LPOE modernization projects that will create new good-paying jobs, bolster safety and security, and make our economy more resilient to supply chain challenges.
An agreement established by a government buyer with a Multiple Award Schedule contractor to fill repetitive needs for supplies or services.
Types of funds to use on specific expenses.
The work done to make a structure or system ready for use or to bring a construction or development project to a completed state.
Negotiated firm-fixed pricing on airline seats for official government travel. The locked-in ticket prices for the fiscal year save federal agencies time and money. Federal employees enjoy flexibility to change their plans without incurring penalties or additional costs. All negotiated rates have:
Use the CPP search tool to find current fares.
A space where individuals work independently or co-work collaboratively in a shared office. The work environment is similar to a typical office, usually inclusive of office equipment and amenities. Typical features of co-working facilities include work spaces, wireless internet, communal printer/copier/fax, shared kitchens, restrooms and open seating areas. May also be referred to as a “shared office.”
A system that is bought from a commercial vendor to solve a particular problem, as opposed to one that a vendor custom builds.
An employee who negotiates and awards contracts with vendors and who has the sole authority to change, alter or modify a contract.
An employee whose duties are to develop proper requirements and ensure contractors meet the commitments during contract administration, including the timeliness and delivery of quality goods and services as required by the contract.
A request of GSA where a federal agency retains and manages all aspects of the procurement process and is able to work with the selected vendor after award.
The process of handling real property that is surplus to the federal government’s needs. Federal law mandates the disposal process, which has these major steps (although not every property goes through every step):
An SBA program that gives preferential consideration for certain government contracts to businesses that meet the following eligibility requirements:
See Title 13 Part 127 Subpart B of the Code of Federal Regulations for more information.
A vehicle that is powered by an electric motor drawing current from rechargeable storage batteries or other portable electrical energy storage devices, as defined by 10 C.F.R. § 474.2. It includes a battery electric vehicle, a plug-in hybrid electric vehicle, a fuel-cell electric vehicle, etc.
Also called electric vehicle chargers, this includes EV charge cords, charge stands, attachment plugs, vehicle connectors, and protection, which provide for the safe transfer of energy between the electric utility power and the electric vehicle.
The primary regulation for federal agencies to use when buying supplies and services with funds from Congress.
Use acquisition.gov to browse FAR parts or subparts or download the full FAR in various formats.
The travel and relocation policy for all federal civilian employees and others authorized to travel at government expense.
A program that promotes the adoption of secure cloud services across the federal government by providing a standardized approach to security and risk assessment.
A GSA business line that provides safe, reliable, low-cost vehicle solutions for federal agency customers and eligible entities. Offerings include:
A charge card for U.S. government personnel to use when paying for fuel and maintenance of GSA Fleet vehicles. Find out where the Fleet card is accepted, how to use it and more.
A Department of Homeland Security program that allows members to use expedited lanes at U.S. airports and when crossing international borders by air, land and sea.
A charge card for certain U.S. Government employees to use when buying mission-related supplies or services using simplified acquisition procedures, when applicable, and when the total cost does not exceed micro-purchase thresholds.
A charge card for U.S. government personnel to use when paying for reimbursable expenses while on official travel. Visit smartpay.gsa.gov for more.
A vehicle used to perform an agency’s mission(s), as authorized by the agency.
A pre-competed, multiple-award, indefinite delivery, indefinite quantity contract that agencies can use to buy total IT solutions more efficiently and economically.
A ceremony marking the official start of a new construction project, typically involving driving shovels into ground at the site.
An online shopping and ordering system at gsaadvantage.gov that provides access for federal government employees and in some cases, state and local entities, to purchase from thousands of contractors offering millions of supplies and services.
An online auction site at gsaauctions.gov that allows the general public to bid on and buy excess federal personal property assets such as:
Real property for which GSA is responsible. It can be either federally owned or leased from a public or private property owner.
An SBA program that gives preferential consideration for certain government contracts to business that meet the following eligibility requirements:
See Title 13 Part 126 Subpart B of the Code of Federal Regulations for more information.
A type of contract when the quantity of supplies or services, above a specified minimum, the government will require is not known. IDIQs help streamline the contract process and speed service delivery.
A fee paid by businesses who are awarded contracts under Multiple Award Schedule to cover GSA’s cost of operating the program. The fee is a fixed percentage of reported sales under MAS contracts that contractors pay within 30 calendar days following the completion of each quarter.
A law that provides $3.375 billion for us to:
This includes $2.15 billion for low embodied carbon materials in construction projects, $975 million to support emerging and sustainable technologies, and $250 million for measures to convert more buildings into High Performance Green Buildings.
A written agreement entered into between two federal agencies, or major organizational units within an agency, which specifies the goods to be furnished or tasks to be accomplished by one agency (the servicing agency) in support of the other (the requesting agency).
A facility, also known as a border station, that provides controlled entry into or departure from the United States for persons or materials. It houses the U.S. Customs and Border Protection and other federal inspection agencies responsible for the enforcement of federal laws related to entering into or departing from the U.S.
An employee who is responsible for preparing, negotiating, awarding and monitoring compliance of lease agreements.
Criteria used to select the technically acceptable proposal with the lowest evaluated price. Solicitations must specify that award will be made on the basis of the lowest evaluated price of proposals meeting or exceeding the acceptability standards for non-cost factors.
The rate of reimbursement for driving a privately owned vehicle when your agency authorizes it. Current rates are at gsa.gov/mileage.
Long-term governmentwide contracts with commercial firms providing federal, state, and local government buyers access to more than 11 million commercial products and services at volume discount pricing. Also called Schedules or Federal Supply Schedules.
The standard federal agencies use to classify business establishments for the purpose of collecting, analyzing, and publishing statistical data related to the U.S. business economy.
A family of seven separate governmentwide multiple award, IDIQ contracts for program management, management consulting, logistics, engineering, scientific and financial services.
A formal, signed agreement between GSA’s Public Buildings Service and a federal agency for a specific space assignment.
Services performed under a contract with a federal agency that include:
Official verification of someone’s origin, identity, and nationality. A U.S. passport is required of U.S. citizens for international travel and reentry into the United States. There are three types of passports: diplomatic, official, and regular. A government official may have at the same time a valid regular passport and a valid official or diplomatic passport. Use GSA Form 2083 to begin a request for an official passport.
The per day rates for the lower 48 continental United States, which federal employees are reimbursed for expenses incurred while on official travel. Per diem includes three allowances:
An identification card that allows credentialed government personal to access facilities, computers, or information systems. May also be referred to as HSPD-12 card, LincPass, Smart Card, or CAC.
Furniture and equipment such as appliances, wall hangings, technological devices, and the relocation expenses for such property.
Information that can be used to distinguish or trace an individual’s identity, either alone or when combined with other information that is linked or linkable to a specific individual. Get more info from OMB Circular A-130 [PDF].
You should only drive a privately owned vehicle for official travel after your agency evaluates the use of:
When your agency has determined a POV to be the most advantageous method of transportation, you are authorized reimbursement for mileage and some additional allowances (parking, bridge, road and tunnel fees, etc.).
Approvals from GSA’s congressional authorizing committees, the U.S. Senate Committee on Environment and Public Works and the U.S. House Committee on Transportation and Infrastructure, for proposed capital and leasing projects that require funding over an annually established threshold.
Region 1 (New England): Connecticut, Maine, Massachusetts, New Hampshire, Rhode Island, Vermont
Region 2 (Northeast and Caribbean): Northern New Jersey, New York, Puerto Rico, U.S. Virgin Islands
Region 3 (Mid-Atlantic): Delaware, parts of Maryland, Southern New Jersey, Pennsylvania, parts of Virginia, West Virginia
Region 4 (Southeast Sunbelt): Alabama, Florida, Georgia, Kentucky, Mississippi, North Carolina, South Carolina, Tennessee
Region 5 (Great Lakes): Illinois, Indiana, Michigan, Minnesota, Ohio, Wisconsin
Region 6 (Heartland): Iowa, Kansas, Missouri, Nebraska
Region 7 (Greater Southwest): Arkansas, Louisiana, New Mexico, Oklahoma, Texas
Region 8 (Rocky Mountain): Colorado, Montana, North Dakota, South Dakota, Utah, Wyoming
Region 9 (Pacific Rim): Arizona, California, Hawaii, Nevada
Region 10 (Northwest Arctic): Alaska, Idaho, Oregon, Washington
Region 11 (National Capital): Washington, D.C., area including parts of Maryland and Virginia
Formal agreements between GSA and a federal agency customer where GSA agrees to provide goods, services, or both, and the federal agency agrees to reimburse GSA’s direct and indirect costs. The customer portal for RWA information is called eRETA at extportal.pbs.gsa.gov.
A document used in negotiated procurements to communicate government requirements to prospective contractors (firms holding Multiple Award Schedule contracts) and to solicit proposals (offers) from them.
A document used to communicate government requirements, but which do not solicit binding offers. Quotations submitted in response are not offers. The Multiple Award Schedule order is the offer, and then the contractor can do something to show acceptance, like ordering supplies or contacting subcontractors.
Long-term governmentwide contracts with commercial firms providing federal, state, and local government buyers access to more than 11 million commercial products and services at volume discount pricing. Also called Multiple Award Schedule or Federal Supply Schedules.
An SBA program that gives preferential consideration for certain government contracts to businesses that meet the following eligibility requirements:
See Title 13 Part 125 Subpart B of the Code of Federal Regulations for more information.
An SBA designation for businesses that meet size standards set for each NAICS code. Most manufacturing companies with 500 employees or fewer, and most non-manufacturing businesses with average annual receipts under $7.5 million, will qualify as a small business.
See Title 13 Part 121.201 of the Code of Federal Regulations for more information.
To improve and stimulate small business utilization, we award contracts to businesses that are owned and controlled by socially and economically disadvantaged individuals. We have contracting assistance for:
A Small Business Administration program that gives preferential consideration for certain government contracts to business that meet the following eligibility requirements:
See Title 13 Section 124.1001 of the Code of Federal Regulations for more information.
The basis for the lease negotiation process, which becomes part of the lease. SFOs include the information necessary to enable prospective offerors to prepare proposals. See SFO minimum requirements.
Specific supply and service subcategories within our Multiple Award Schedule. For the Information Technology Category, a SIN might be new equipment or cloud services.
A national policy committing to create and maintain conditions under which humans and nature can exist in productive harmony to support present and future generations.
An online system at sam.gov, which the U.S. Government uses to consolidate acquisition and award systems for use by contractors wishing to do business with the federal government. Formerly known as FBO.gov, all contracting opportunities valued over $25,000 are posted at sam.gov.
When you use a government purchase card, such as the "GSA SmartPay" travel card for business travel, your lodging and rental car costs may be exempt from state sales tax. Individually billed account travel cards are not tax exempt in all states. Search for exemption status, forms and important information.
The finishes and fixtures federal agency tenants select that take a space from a shell condition to a finished, usable condition and compliant with all applicable building codes and standards.
A statute that applies to all Multiple Award Schedule contracts, unless otherwise stated in the solicitation or contract, which requires contractors to sell to the U.S. Government only products that are manufactured or “substantially transformed” in the U.S. or a TAA-designated country.
An option for vendors to report transactional data — information generated when the government purchases goods or services from a vendor — to help us make federal government buying more effective.
See our TDR page for which SINs are eligible and which line-item data to submit.
A unique number required to do business with the federal government.
An indicator of how efficiently a federal agency is currently using space, it is traditionally calculated by dividing the usable square feet of the space, by the number of personnel who occupy the space.
A Small Business Administration program that gives preferential consideration for certain government contracts to businesses that meet the following eligibility requirements:
A governmentwide acquisition contract exclusively for service-disabled veteran-owned small businesses to sell IT services such as:
The amount of solid waste, such as trash or garbage, construction and demolition waste, and hazardous waste, that is reused, recycled or composted instead of being put in a landfill or burned.
A GSA program designed to promote recycling and reuse of solid waste.
A Small Business Administration program that gives preferential consideration for certain government contracts to businesses that meet the following eligibility requirements:
See Title 13 Part 127 Subpart B of the Code of Federal Regulations for more information.
Vehicles that, when operating, produce zero tailpipe exhaust emissions of any criteria pollutant (or precursor pollutant) or greenhouse gas. These include battery and fuel cell electric vehicles, as well as plug-in hybrid vehicles that are capable of operating on gas and electricity. They also may be called all-electric vehicles.
U.S. General Services Administration