18 months after the date of the enactment of this section, and annually thereafter, the Director shall submit to the Committee on Oversight and Government Reform of the House of Representatives and the Committee on Homeland Security and Government Affairs of the Senate a report that includes the following: (1) The status, efficiency, and effectiveness of FedRAMP during the preceding year in authorizing and recertifying secure cloud solutions for Federal agency cloud customers. (2) The length of time for Federal agency cloud customers to issue authorizations to operate during the preceding year. (3) Agency requests for FedRAMP waivers. (4) Progress during the preceding year in advancing automation techniques to securely automate FedRAMP processes and to accelerate reporting as described in this section. (5) Number of cloud computing systems in use at each agency and the number of cloud computing authorizations to operate. (b) GAO report Not later than 2 years after the date of enactment of this section, and every three years thereafter, the Comptroller General shall submit to the Oversight and Government Reform Committee of the House of Representatives and the Homeland Security and Governmental Affairs Committee of the Senate an assessment of FedRAMP, third party assessment organizations, and Federal agency cloud customers, including the following: (1) An evaluation of the impact and continuing need for specific cloud security controls. (2) A review of the adequacy of resources to run FedRAMP. (3) The development of reusability and the potential for the use and adoption of reciprocal standards, whether from Government or the private sector, as substitutes for specific security controls in use by the FedRAMP Project Management Office. 3615. Definitions (a) In general Except as provided under paragraph (2), the definitions under sections 3502 and 3552 apply to sections 3607 through 3614. (b) Additional definitions In sections 3607 through 3614: (1) Administrator The term Administrator means the Administrator of