Apex Assurance Group

PM Guide to FIPS 140 This free guide provides a primer for FIPS 140 and is targeted specifically towards product managers who are considering pursuit of this validation standard.

Federal Information Processing Standard 140 specifies requirements for cryptographic modules. Product vendors pursue this rigorous standard to sell products to US Federal government and other industry verticals.

This paper will provide an overview of FIPS 140 validation and highlight salient points from a product manager’s point of view. While specific requirements will not be covered, this paper will address the validation process, the reasons to pursue validation, typical timeframes, categories of requirements, and documentation requirements. This paper will conclude with a list of recommendations and best practices for pursuing FIPS 140.

No registration required. Click here for a direct download.