Hi Everyone – Ryan from Acumen here. We wanted to remind everyone that the new NIST Cost Recovery fees for FIPS 140-2 module submissions will be in effect as of October 1st, 2017. This means if your module validation report is submitted to the CMVP on or after October 1, 2016 (ET), the cost recovery fee will be the FY17 cost recovery rates.
The FY17 rates are as follows:
IG G.8 Scenario’s 1, 2 and 4: CR fee N/A, ECR fee: $1000
IG G.8 scenario’s 1A and 1B: CR fee $1500, ECR fee: $1000
IG G.8 Scenario 3: CR fee $3000, ECR fee: $1500
IG G.8 Scenario 5:
Security Level 1: CR fee: $6000, ECR fee: $3000
Security Level 2: CR fee: $8000, ECR fee: $4000
Security Level 3: CR fee: $11000, ECR fee: $5000
Security Level 4: CR fee: $15000, ECR fee: $6000
If your module validation report is submitted to the CMVP between September 22 and 30, 2016 (ET), the cost recovery fee will be the FY16 (current) cost recovery rate.
As a result of the transition to a new fiscal year NIST Billing will also be unavailable from Thursday September 22nd, 2016 to Monday, October 3, 2016.
Please see the CMVP website (http://csrc.nist.gov/groups/STM/cmvp/notices.html) or the CMVP FAQ for additional information on Cost Recovery fees levied by NIST for FIPS 140-2 submissions or feel free to reach out to the Acumen team if you have questions on how or if your module submission will be affected by the NIST FY17 transition.