; (2) issue agency-specific authorizations to operate for cloud computing services in compliance with section 3553; (3) confirm whether there is a provisional authorization to operate in the cloud security repository established under section 3608(b)(10) issued by the Joint Authorization Board or a FedRAMP authorization issued by the FedRAMP Program Management Office before beginning an agency authorization for a cloud computing product or service; (4) to the extent practicable, for any cloud computing product or service the agency seeks to authorize that has received either a provisional authorization to operate by the Joint Authorization Board or a FedRAMP authorization by the FedRAMP Program Management Office, use the existing assessments of security controls and materials within the authorization package