Labgram #55/Valgram #76 - Update on NIAP CCEVS Strategy

All,

As most of you have probably seen, the Army just released their new Letter to Industry.  Since they cite the NEW NIAP Strategy in their letter, I wanted to provide an update on the status of the new Standard PPs and the updates to the Basic Robustness PPs that we’re trying to get accomplished by 1 Oct 09.  Below is a somewhat prioritized list of these PPs:

• New Standard Lost Laptop PP – to be published very soon
• New Standard USB PP – being developed
• Updated Basic Robustness VPN PP – being worked
• Updated Basic Robustness Firewall PP – being worked
• Updated Basic Robustness Router PP – being worked
• Updated Basic Robustness IDS PP – being worked
• Updated Basic Robustness OS PP – being worked
• Updated Basic Robustness Database PP – being reviewed
• Updated Basic Robustness Anti-Virus PP – being reviewed

We do NOT yet have a prioritized list of the NEW PPs that will be written.  We will be asking labs and customers for their recommendations in the very near future.

Thanks,

Audrey M. Dale, CISSP
Director, NIAP CCEVS
NSA Commercial Solutions Center
Tel 410-854-4458

Posted on 2009-06-02 by Randy Sullivan