; (4) perform such other roles and responsibilities as the Administrator may assign, in consultation with the FedRAMP Program Management Office and members of the Joint Authorization Board; and (5) establish metrics and goals for reviews and activities associated with issuing provisional authorizations to operate. (d) Determinations of demand for cloud computing services The Joint Authorization Board shall consult with the head of each agency to establish a process for prioritizing and accepting the cloud computing services to be granted a provisional authorization to operate through the Joint Authorization Board, which shall be made available on a public website. (e) Detail of personnel To assist the Joint Authorization Board in discharging the responsibilities under this section, personnel of agencies may be detailed to the Joint Authorization Board for the performance of duties described under subsection (c). 3610. Independent assessment organizations (a) Requirements for accreditation The Administrator, in consultation with the Joint Authorization Board, shall determine the requirements for certification of independent assessment organizations. Such requirements may include developing or requiring certification programs for individuals employed by the independent assessment organizations who lead FedRAMP assessment teams. (b) Assessment Accredited independent assessment organizations may assess, validate, and attest to the quality and compliance of security assessment materials provided by cloud service providers. 3611. Roles and responsibilities of agencies (a) In general In implementing the requirements of FedRAMP, the head of each agency shall, consistent with guidance issued by the Director pursuant to section 3612— (1) create policies to ensure cloud computing services used by the agency meet FedRAMP security requirements and other risk-based performance requirements as defined by the Director