The Cryptographic Module Validation Program (CMVP), which was established by NIST to validate modules for the\u00a0Federal Information Processions Standard (FIPS), has announced upcoming policy changes for\u00a0the Modules In Process (MIP) list and Implementation Under Test (IUT) phase.<\/span><\/p>\n

CMVP has stated that “Over the past year, the CMVP has made great strides in reducing the amount of time to complete a validation. To continue to improve our efficiency by focusing on modules where the lab and vendor are motivated, the CMVP will implement the following policies.”<\/i><\/span><\/p>\n

Effective July 1, 2017: <\/span><\/strong><\/p>\n

1. \u00a0 \u00a0The CMVP will automatically drop modules in the IUT phase after 18 months<\/span><\/p>\n

2. \u00a0 \u00a0The amount of time for the labs to respond to CMVP comments will be reduced from 120 days to 90 days. After 90 days, the module will be placed on hold and removed from the MIP list<\/span><\/p>\n

Effective January 1, 2018: <\/span><\/strong><\/p>\n

1. \u00a0 \u00a0The CMVP will drop modules that have not been validated within 2 years of submission or IUTB, whichever occurred first. When the module is dropped, the vendor and lab will have to restart the validation process by sending an updated submission and paying a new cost recovery fee at the current rate<\/span><\/p>\n

What does this Mean for Current and Future Validations?<\/strong><\/p>\n

If you are currently in the IUT phase of your validation, it is critical that you are steadily moving forward with all necessary requirements. Companies that have been in this phase for an extended period of time are at risk of wasting months if not years of hard work. Companies with a lack of experience and expertise on the requirements may need additional support to ensure they are not removed from the validation process.<\/p>\n

For future validation efforts, the proper planning and analysis of your product is key. Establishing the proper benchmarks and understanding how your product matches the requirements will help ensure you do not get caught in engineering delays that could cause you to “sit” in the IUT phase and ultimately throw out of the process.<\/p>\n

Managing your validation and aligning resources to ensure proper identification, creation, and review of all materials is a must\u00a0for companies hoping to finish in a timely manner.<\/p>\n

Need help with your validation?<\/strong><\/p>\n

Not sure where to go from here?<\/p>\n

Corsec has a wide array of services to help you wherever you are in the validation process. Speak directly to an expert<\/a><\/span><\/strong> who can help you get back on track today!<\/p>\n

Stay up to date with Corsec as we bring you all the most recent updates to the standards, certifications, and requirements \u2013\u00a0Subscribe<\/a><\/strong><\/p>\n

<\/a><\/a><\/a><\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

The Cryptographic Module Validation Program (CMVP), which was established by NIST to validate modules for the\u00a0Federal Information Processions Standard (FIPS), has announced upcoming policy changes for\u00a0the Modules In Process (MIP) list and Implementation Under Test … <\/p>\n

Read more<\/a><\/p>\n","protected":false},"author":2,"featured_media":9461,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5,3,91],"tags":[82,87,4,39],"class_list":["post-9459","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-fips-140-2","category-news","category-security","tag-certification-process","tag-industry-updates","tag-fips-140-2","tag-security-certifications","infinite-scroll-item","generate-columns","tablet-grid-50","mobile-grid-100","grid-parent","grid-50","no-featured-image-padding"],"yoast_head":"\n