are in compliance with any guidance or other requirements issued related to FedRAMP. (3) Review, analyze, and update guidance on the adoption, security, and use of cloud computing services used by agencies. (4) Ensure the Joint Authorization Board is in compliance with section 3609(c). (5) Promulgate regulations on the role of FedRAMP authorization in agency acquisition of cloud computing products and services that process unclassified information. 3613. Authorization of appropriations for FedRAMP There is authorized to be appropriated $25,000,000 each year for the FedRAMP Program Management Office and the Joint Authorization Board. 3614. Reports to Congress Not later than 12 months after the date of the enactment of this section, and annually thereafter, the Director shall submit to the Committee on Oversight and Reform of the House of Representatives and the Committee on Homeland Security and Governmental Affairs of the Senate a report that includes the following: (1) The status, efficiency, and effectiveness of FedRAMP and agencies during the preceding year in supporting the speed, effectiveness, sharing, reuse, and security of authorizations to operate for cloud computing products and services, including progress towards meeting the metrics adopted by the FedRAMP Program Management Office pursuant to section 3608(d) and the Joint Authorization Board pursuant to section 3609(c)(5). (2) Data on agency use of provisional authorizations to operate issued by the Joint Authorization Board and agency sponsored authorizations that receive FedRAMP authorization by the FedRAMP Program Management Office. (3) The length of time for the Joint Authorization Board to review applications for and issue provisional authorizations to operate. (4) The length of time for the FedRAMP Program Management Office to review agency applications for and issue FedRAMP authorization. (5) The number of provisional authorizations to operate issued by each the Joint Authorization Board and FedRAMP authorizations issued by the FedRAMP Program