CygnaCom Solutions Lab Designated for HSPD-12/FIPS 201 Testing.
CygnaCom Solutions, a leader in information security testing and consulting, today announced that the National Institute of Standards and Technology (NIST) has designated CygnaCom's Cryptographic Equipment Assessment Laboratory (CEAL) as a NIST Personal Identification Verification Program (NPIVP) test facility. As Federal agencies develop their Personal Identity Verification (PIV) systems, they will be required to purchase products and services validated under the NPIVP testing scheme. CEAL is also launching a new service offering, Certification & Accreditation for PIV systems.
Under Homeland Security Presidential Directive 12 (HSPD-12), all Federal agencies will be required to develop a Personal Identity Verification system. In addition to standardizing the processes around identity proofing of individuals, HSPD-12 mandates the issuance of smart cards with digital certificates to all employees and contractors for access to Federal facilities and information systems. NIST has provided the technical guidance for HSPD-12, and in February 2005, Federal Information Processing Standard (FIPS) 201, entitled "Personal Identity Verification of Federal Employees and Contractors" was issued. FIPS 201 guides the development of each agency's PIV system.
FIPS 201 incorporates a number of previously issued technical publications regarding smart cards (SP 800-76), biometrics (SP 800-76), and cryptographic algorithms (SP 800-78). The PIV testing will encompass the technical specifications detailed in these Special Publications and will validate components, sub-systems and integrated systems.
"CEAL was one of the first NIST-accredited Cryptographic Module Testing (CMT) laboratories, so we are pleased that NIST has chosen us to conduct FIPS 201 testing," said Peter Bello, President of CygnaCom Solutions. "HSPD-12 has raised the profile of personal identity verification in the Federal government, and it is important that the standards put forth under FIPS 201 are followed."
For more information, see the NIST PIV Program website at http://csrc.nist.gov/piv-program/index.html.
About CygnaCom Solutions
CygnaCom Solutions has been providing security solutions to government and business since 1994. With demonstrated expertise in all aspects of system security engineering, CygnaCom provides clients with security risk assessments, security architectures, security assurance consulting, and Certification and Accreditation services, as well as FIPS 140-2, FIPS 201 and Common Criteria testing. For more information, visit: www.cygnacom.com or call 703-848-0883.