; and (II) the extent to which each covered agency has submitted a comprehensive strategy that addresses the items listed in paragraph (1)(A)(ii). (4) GAO review (A) In general Not later than one year after the date of the enactment of this Act, and each year thereafter, the Comptroller General of the United States shall review and verify the quality and completeness of the inventory and strategy of each covered agency required under paragraph (1)(A). (B) Report The Comptroller General of the United States shall, on an annual basis, publish a report on each review conducted under subparagraph (A). (b) Ensuring cybersecurity standards for data center consolidation and cloud computing (1) In general In implementing a data center consolidation and optimization strategy under this section, a covered agency shall do so in a manner that is consistent with Federal guidelines on cloud computing security, including— (A) applicable provisions found within the Federal Risk and Authorization Management Program (FedRAMP)