Welcome to the Acumen Security Blog

FIPS Lab Satisfaction Survey: Acumen Receives High Marks

Mark Minnoch at the FIPS Hacker published his Q3 Lab Satisfaction Survey last month and we are proud to note that we received high ratings across the board:

customer_feedback_matrix

And this isn’t a one time anomaly. In the Q2 survey Acumen received the identical high ratings!!!

The FIPS Lab Survey is a first of its kind started by Mark couple of quarters ago. He sends out survey to companies that have finished FIPS certification in the quarter asking them five simple but insightful questions:

  1. How satisfied are you overall with your recent FIPS Lab experience?
  2. How satisfied are you with your FIPS Lab’s responsiveness?
  3. How satisfied are you with your FIPS Lab’s FIPS 140-2 expertise?
  4. How satisfied are you with your FIPS Lab’s expertise of your company’s technology?
  5. How satisfied are you with your FIPS Lab’s communication during your project?

As you can see the characteristics that he has modeled his questions around are the ones most product companies care about when selecting the certification lab to work with.

Receiving such high ratings on an independent industry survey does make the hard work we put into our execution well worth it. It also helps validate our methodology and customer focussed approach to certifications. Now the challenge is on us to maintain this high satisfaction for all our customers.

The survey has additional statistics such as distribution of certificates across levels, types etc and also included is a checklist for selecting labs. The Q3 survey results can be downloaded here. You can use the coupon code acumen to get a 35% discount.

Happy reading!

NIST Cost Recovery increase October 1st

Hi Everyone – Ryan from Acumen here. We wanted to remind everyone that the new NIST Cost Recovery fees for FIPS 140-2 module submissions will be in effect as of October 1st, 2017. This means if your module validation report is submitted to the CMVP on or after October 1, 2016 (ET), the cost recovery fee will be the FY17 cost recovery rates.

The FY17 rates are as follows:

IG G.8 Scenario’s 1, 2 and 4: CR fee N/A, ECR fee: $1000
IG G.8 scenario’s 1A and 1B: CR fee $1500, ECR fee: $1000
IG G.8 Scenario 3: CR fee $3000, ECR fee: $1500
IG G.8 Scenario 5:
Security Level 1: CR fee: $6000, ECR fee: $3000
Security Level 2: CR fee: $8000, ECR fee: $4000
Security Level 3: CR fee: $11000, ECR fee: $5000
Security Level 4: CR fee: $15000, ECR fee: $6000

If your module validation report is submitted to the CMVP between September 22 and 30, 2016 (ET), the cost recovery fee will be the FY16 (current) cost recovery rate.

As a result of the transition to a new fiscal year NIST Billing will also be unavailable from Thursday September 22nd, 2016 to Monday, October 3, 2016.

Please see the CMVP website (http://csrc.nist.gov/groups/STM/cmvp/notices.html) or the CMVP FAQ for additional information on Cost Recovery fees levied by NIST for FIPS 140-2 submissions or feel free to reach out to the Acumen team if you have questions on how or if your module submission will be affected by the NIST FY17 transition.