# McCormick Proposes Cloud Security Act

Rep. Rich McCormick introduced the Common-Sense Cloud Security Act, which would direct NIST to update cloud-security guidance covering identity management, third-party connections, suspicious-activity detection, and assessment of the potential impact of a compromise. The proposal also calls for a voluntary certification program and keeping federal cloud-security requirements current; it is proposed legislation, not a solicitation or contract award.

- Federal cloud contractors and agencies may see updated security guidance if the legislation advances and NIST implements its provisions; the proposal does not establish current mandatory requirements.
- Cloud providers and cybersecurity firms can assess how their identity, third-party access, monitoring, and impact-assessment capabilities align with the areas named in the bill.
- Contractors should track the bill’s progress and any subsequent NIST guidance, as these could inform future federal cloud-security expectations and procurement planning.

**Jurisdictions:** federal
**Industries:** Information Technology
**Topics:** Cybersecurity
**Published:** November 09, 2026

### Government Entities
- National Institute of Standards and Technology (NIST)
- U.S. House of Representatives

### Sources
- [McCormick targets cloud vulnerability with new legislation](https://iqconnect.house.gov/iqextranet/iqClickTrk.aspx?&cid=GA06RM&crop=15445QQQ13224124QQQ5251123QQQ8087680&report_id=&redirect=https%3a%2f%2fthehill.com%2fopinion%2ftechnology%2f6206434-nist-updated-modern-cloud-guidance%2f&redir_log=425550628352562) - Mccormick House