RE: Anybody got experience doing documentation on compliance with FIPS-140

["Donald H. White" <trlbldr -at- comcast -dot- net>]

I have not had direct experience with the FIPS series, but I have had
extensive experience with DCIDs and security requirements documents (such as
the Rainbow Series) produced by the (former) National Computer Security
Center.

You can obtain most information about FIPS 140 from this URL:

http://csrc.nist.gov/cryptval/140-2.htm

You can find out about the Common Criteria for IT Security Evaluation at:

http://csrc.nist.gov/cc/

The important thing is that the documents state security requirements that
must be designed and built into products in order to pass validation &
verification for the class of product developed.

Good luck!

Don White
trlbldr -at- comcast -dot- net




^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

WEBWORKS FINALDRAFT - EDIT AND REVIEW, REDEFINED
Accelerate the document lifecycle with full online discussions and unique feedback-management capabilities. Unlimited, efficient reviews for Word
and FrameMaker authors. Live, online demo:
http://www.webworks.com/techwr-l

---
You are currently subscribed to techwr-l as:
archiver -at- techwr-l -dot- com
To unsubscribe send a blank email to leave-techwr-l-obscured -at- lists -dot- techwr-l -dot- com
Send administrative questions to lisa -at- techwr-l -dot- com -dot-  Visit
http://www.techwr-l.com/techwhirl/ for more resources and info.