InfoGard's Quality Manager informed me that CMVP review times have slipped to the 4 to 6 month range for FIPS reports this summer. We believe the reasons for the summer slow-down are due to CMVP vacations, new Implementation Guidance, and a surge in report submissions by Labs in the spring.
When selecting a FIPS Laboratory for your next FIPS project, make sure to ask about the Lab's report review process prior to submission. InfoGard has a deliberate review process involving an independent technical review by a FIPS Security Engineer, a Quality review, a Signatory review, and then a final quick Quality check at the end. This is our secret sauce for delivering high-quality reports to the CMVP. Clear, consistent, and compliant reports are easily reviewed by the CMVP allowing you to reach your product sales goals sooner.
We like reasons to celebrate at InfoGard and we thank our customers for allowing us to achieve this milestone.
Earlier this month, InfoGard became the first FIPS 140-2 testing laboratory to pass the 500 FIPS Certificates mark! That's 28% of the total during the lifetime of the program. Thank you, InfoGard Customers, for trusting us with your FIPS 140-2 projects.