Welcome to the Acumen Security Blog

NIST Cost Recovery increase October 1st

Hi Everyone – Ryan from Acumen here. We wanted to remind everyone that the new NIST Cost Recovery fees for FIPS 140-2 module submissions will be in effect as of October 1st, 2017. This means if your module validation report is submitted to the CMVP on or after October 1, 2016 (ET), the cost recovery fee will be the FY17 cost recovery rates.

The FY17 rates are as follows:

IG G.8 Scenario’s 1, 2 and 4: CR fee N/A, ECR fee: $1000
IG G.8 scenario’s 1A and 1B: CR fee $1500, ECR fee: $1000
IG G.8 Scenario 3: CR fee $3000, ECR fee: $1500
IG G.8 Scenario 5:
Security Level 1: CR fee: $6000, ECR fee: $3000
Security Level 2: CR fee: $8000, ECR fee: $4000
Security Level 3: CR fee: $11000, ECR fee: $5000
Security Level 4: CR fee: $15000, ECR fee: $6000

If your module validation report is submitted to the CMVP between September 22 and 30, 2016 (ET), the cost recovery fee will be the FY16 (current) cost recovery rate.

As a result of the transition to a new fiscal year NIST Billing will also be unavailable from Thursday September 22nd, 2016 to Monday, October 3, 2016.

Please see the CMVP website (http://csrc.nist.gov/groups/STM/cmvp/notices.html) or the CMVP FAQ for additional information on Cost Recovery fees levied by NIST for FIPS 140-2 submissions or feel free to reach out to the Acumen team if you have questions on how or if your module submission will be affected by the NIST FY17 transition.

Welcome Aboard!

At Acumen, are always looking for ways to improve both our customer experience and our testing. In addition to tooling, infrastructure, and training investments, we truly believe the best way to build a world class lab is to bring on the right people. I think we’ve done a great job of bringing not only excellent engineers but excellent people on board. Today is not exception, I am proud and pleased to announce the latest member of the Acumen family, Ryan Thomas.
Many of you may recognize Ryan’s name from his many years leading a FIPS lab, the many crypto related working group he’s a member of, or the conferences he is always at. Both Ashit and I have had the opportunity to work with Ryan both at Acumen and in our previously jobs at Cisco. It is an understatement to say that our experiences with Ryan were nothing but excellent. Ryan truly embodies the Acumen philosophy of putting the customers first and foremost in every interaction. This combined with his excellent technical grasp is why we are so excited to have him join Acumen.
So, if you have a call with us over the next couple weeks, you will likely hear Ryan on the bridge as well. True to form, Ryan is already overly eager to start jumping in and producing. Please say “Hi” if he’s on a call or email chain. Just like Ashit and I (and all of us here at Acumen really), he loves to chat and would love to help you navigate the certification process.
Welcome aboard Ryan, today Acumen is better than yesterday!