The Federal Risk and Authorization Management Program, known as FedRAMP, is supposed to make it easier for agencies to use commercial cloud computing. FedRAMP, as policy, has been around for a dozen years, but only became law at the end of last year.