; (B) cloud service providers; (C) third party assessment organizations; (D) agency Offices of Inspector General; and (E) the Government Accountability Office. (8) Establish and maintain a public comment process for newly issued or revised guidance adopted by FedRAMP. (c) Evaluation of automation procedures The FedRAMP Program Management Office shall assess and evaluate available automation procedures to accelerate the processing of FedRAMP applications. (d) Metrics for certification The FedRAMP Program Management Office shall adopt specific metrics regarding the time, cost, and quality of the assessments necessary for completion of a FedRAMP authorization process in a manner that can be consistently tracked over time, which shall be done in conjunction with the periodic testing and evaluation process pursuant to subchapter II of chapter 35 in a manner that minimizes the agency reporting burden. 3609. Roles and responsibilities of the Joint Authorization Board (a) Establishment There is established the Joint Authorization Board which shall consist of the Chief Information Officers or their designees of the Department of Defense, the Department of Homeland Security, and the General Services Administration. (b) Issuance of provisional authorizations To operate The Joint Authorization Board shall have the authority to issue provisional authorizations to operate to cloud service providers that meet FedRAMP security guidelines set forth in the Common Security Control Baseline. (c) Duties The Joint Authorization Board shall— (1) review and validate cloud service provider and third party assessment organization security assessment packages; (2) in consultation with the FedRAMP Program Management Office, serve as a resource for best practices to accelerate the FedRAMP process; (3) obtain such professional staff as may be necessary for the effective operation of FedRAMP and such other activities as are essential to properly perform critical functions