HB Ad Slot HB Mobile Ad Slot Townsend L. BourneEmail202-469-4917Bio and Articles Daniel J. AlvaradoEmail202.747.2325Bio and Articles HB Ad Slot Emerging AI Landscape: FedRAMP Publishes Draft Emerging Technology Prioritization Framework in Response to Executive Order on Artificial Intelligence by: Townsend L. Bourne, Daniel J. Alvarado of Sheppard, Mullin, Richter & Hampton LLP - Articles Friday, March 1, 2024 Related Practices & Jurisdictions Communications, Media & InternetAdministrative & Regulatory All Federal Print Mail Download i On January 26, 2024, the Federal Risk and Authorization Management Program (“FedRAMP”) published a draft Emerging Technology Prioritization Framework developed in response to President Biden’s Executive Order 14110 on Safe, Secure, and Trustworthy Development and Use of Artificial Intelligence (previously analyzed by our colleague here). The Executive Order charged FedRAMP with developing a framework to prioritize Emerging Technologies in the FedRAMP authorization process, starting with generative AI. The first three generative AI capabilities selected for prioritization are: chat interfaces code generators debugging tools Emerging Technologies selected for prioritization will have a reduced waiting time before the authorization process (i.e., they get to skip the line), but the authorization process will not be accelerated. The authorization process still will take a similar amount of time as it would for other offerings with the same level and type of authorization. Notably, the Draft Framework emphasizes two points. First, no more than three capabilities will be prioritized at any time to avoid losing the benefits of prioritization. Second, when three cloud service offerings whose primary purpose is to offer one of the prioritized capabilities have achieved FedRAMP authorization, then the capability no longer will be prioritized and any additional offerings using the same technology will return to the standard prioritization process. As such, if you are developing a cloud service offering whose primary purpose is to offer one of the three generative AI capabilities selected for prioritization, it is critical to seek authorization early or risk missing out on the benefits of prioritization for your cloud offering. The Draft Framework also outlines the governance process for establishing prioritization of capabilities. On an annual basis (at minimum), the Chief Information Officer Council and Federal Chief Information Security Officer Council[1], with consultation from the Federal Secure Cloud Advisory Committee, the National Institute of Standards and Technology, and third party assessment organizations, is responsible for nominating Emerging Technologies for FedRAMP to consider for prioritization. The FedRAMP Program Management Office (“PMO”) will review the nominations and propose an updated list of up to three Emerging Technologies for prioritization. The FedRAMP Board is responsible for approving the final list but, as of the date of the publication, the FedRAMP Board has not yet been assembled. Therefore, the FedRAMP PMO is planning to adopt the first three capabilities and finalize the evaluation criteria without a presentation to the FedRAMP Board. Cloud service providers must complete an Emerging Technologies Request Form, which provides the business case demand justification and an attestation to the Emerging Technology criteria for review by the FedRAMP PMO. The justification will explain how the cloud service offering meets the Emerging Technology criteria. The FedRAMP PMO reviews the form and determines whether the cloud service offering meets the criteria established for the particular Emerging Technology and whether its technical characteristics match capabilities that the federal government is seeking to accelerate. If the criteria are met, the cloud service offering will be placed in the FedRAMP PMO’s authorization queue. If the criteria are not met, the cloud service offering still will be placed in the authorization queue, but it will not be prioritized. Appendix A of the Draft Framework provides an overview of artificial intelligence and provides the benchmarks for each of the three capabilities that will be used to measure a cloud service offering’s technical performance. The public comment period currently is open and will close on March 11, 2024. Companies are encouraged to submit comments, questions, or recommendations using this form. FedRAMP published a blog about the draft framework and included several questions on which the General Services Administration is particularly interested in receiving feedback. Providing feedback is critical to the development of the FedRAMP Emerging Technologies Prioritization Framework. We are monitoring the emerging federal government AI landscape and will continue to provide updates as federal agencies publish AI Executive Order-related materials. FOOTNOTES [1] The Chief Information Officer Council and Federal Chief Information Security Council are forums of Chief Information Officers (“CIOs”) with the goal of improving information technology practices across U.S. Government agencies. Copyright © 2024, Sheppard Mullin Richter & Hampton LLP. HB Ad Slot HB Mobile Ad Slot Current Legal Analysis Digital Nomad Visas Offered by Italy, Japan by: Minnie Fu Another Public Company Announces Plan To Decamp To Nevada - Is Delaware's Dam About To Burst? by: Keith Paul Bishop China’s National Intellectual Property Administration Releases Typical Cases of Administrative Enforcement – Trademark by: Aaron Wininger CMS Finalizes Medicaid Access Rule: Significant Changes Ahead for HCBS Industry by: Jeremy A. Avila , Melissa A. Borrelli Minnesota Legislative Update 2024, Part III: Entering the Homestretch—Legislators’ Time to Make It or Break It by: Bruce J. Douglas , Samantha C. Bragg HB Ad Slot HB Mobile Ad Slot More from Sheppard, Mullin, Richter & Hampton LLP FTC Calls Out Bill Payment Company’s Use of Dark Pattern Practices by: A.J. S. Dhaliwal , Mehul N. Madia FTC Cracks Down on Payments Processor for Facilitating Fraud by: A.J. S. Dhaliwal , Mehul N. Madia Ninth Circuit Holds Loan Modification Made by Unlicensed Lender Violates State Usury Law by: A.J. S. Dhaliwal , Mehul N. Madia Tennessee New Law to Curb “De-Banking” by: A.J. S. Dhaliwal , Mehul N. Madia Responsible AI – Everyone is Talking About it But What Is It? by: James G. Gatto Health-e Law Episode 9: Remote Patient Monitoring Innovating Health Tech with Dr. Vipul Kella of Physio AI [Podcast] by: Sara Helene Shanti , Phil Kim What the FTC’s Noncompete Ban Means for Healthcare by: John D. Carroll , Bevin M.B. Newman FDA Makes Good on Its Promise to Regulate Laboratory-Developed Tests by: Dominick DiSabatino , Audrey Mercer NIST Updates AI RMF as Mandated by the White House Executive Order on AI by: James G. Gatto New DOL Exemption Rule Requires Two-Step Salary Increases Under FLSA for Exempt Employees by: Richard J. Simmons Upcoming Legal Education Events Jun 12 2024 REACH 30/30 - June 12th, 2024 Jun 4 2024 FinTech and Securities Trading Platforms May 29 2024 Emerging Legal Concepts for Generative AI - Part 3 May 22 2024 Integrating Trending AI and CMMC Compliance Into Vendor Management HB Ad Slot HB Mobile Ad Slot Print