The CMVP review time for FIPS 140-2 report submissions has improved significantly in recent months. I am reducing my unofficial CMVP review time estimate to 2 to 4 months (previously, I had been telling customers that the queue time was 4 to 5 months).
Please note that this is my personal estimate based on actual report submissions by InfoGard. The review time estimate includes the time from report submission to the CMVP to the time comments are received by the Laboratory.
During lunch last month at the RSA Conference, I mentioned that InfoGard had experienced shorter report review times to Randy, Jean, and Allen of the CMVP. They joked with me that they could slow our report reviews down if it was causing a problem. I assured them that the shorter reviews were a big help to Labs, Vendors, and Customers!
Take the poll on the my home page to share your review time experience with others.
InfoGard just received comments on a Level 2 hardware module revalidation report just 30 days after the report was submitted. This is great news.
ReplyDelete