RE: CCEVS Announcement Impact


Upon seeing my post, I think the smiley face was inappropriate in the sentence about CCTL business case.  That is potentially a serious concern, and not something to make fun about.  I apologize for this.

 

Sincerely,

Gary

 

************************************************************************

* Opinions are not intended to reflect an official position of JHU/APL *

************************************************************************

* Gary Stoneburner                                                     *

* Johns Hopkins University Applied Physics Laboratory                  *

* 11100 Johns Hopkins Road, MS 17-N406                                 *

* Laurel, MD 20723-6099                                                *

* Phone: 240-228-2628 (WA DC), 443-778-2628 (Baltimore)                *

* Fax: 240-228-6391 (WA DC), 443-778-6391 (Baltimore)                  *

* Gary.Stoneburner@jhuapl.edu                                          *

************************************************************************


From: cc-cmt@nist.gov [mailto:cc-cmt@nist.gov] On Behalf Of Stoneburner, Gary R.
Sent: Wednesday, September 20, 2006 11:47 AM
To: Multiple recipients of list
Subject: RE: CCEVS Announcement Impact

 

I know that the resource situation at CCEVS has been tight for some time.  The announcement is 'sudden' only because there wasn't advance public notice, not because it was a quick decision by any means.

 

Perhaps now DoD will be more willing to accept foreign CC certificates than they have been.  I've had a conversation with a foreign firm from a CC certificate producing nation that was having their product evaluated in the US because they wanted to sell to the DoD.  They were told that if they want to sell it there, they must have it evaluated in the US.  The CCRA allows each nation to make their own determination about what products they recommend for use.  The CCRA draws a distinction between accepting an evaluation result and accepting the product for use.  The DoD apparently has implemented a practice of requiring evaluation within the US in order to recommend for use.

 

It will be interesting to see what the business model for US CCTLs becomes when, using the current CCEVS evaluated products list as the source, 97% of the past business is no longer accepted into the scheme. J

 

Cheers,

Gary

 


From: cc-cmt@nist.gov [mailto:cc-cmt@nist.gov] On Behalf Of Kathy Shonaiya
Sent: Wednesday, September 20, 2006 10:49 AM
To: Multiple recipients of list
Subject: CCEVS Announcement Impact

 

The US scheme has made the following announcement which appears on their website:

 

Due to fiscal constraints, beginning on October 1, 2006, for FY07, the NIAP CCEVS will only accept Medium and High Robustness PP compliant products in support of National Security customers. Product submissions meeting the above criteria will be queued and validation resources will be allocated as they become available. As a condition of acceptance, detailed letters of intent that identify the intended DoD or IC customer (containing POC name, organizations, email, phone number) will be required. 


This seems to force developers to get products evaluated overseas if they do not want to meet the Medium or High Robustness PPs.  What effect might this have on US labs?  How does this announcement effect National Directives?  

 

My colleagues and I are hoping to gain some insight into the situation and the impact of the seemingly sudden scheme announcement. 

 

Regards,

 

Kathy Shonaiya

Tresys Technology, LLC

shonaiya@tresys.com

w 410.290.1411 x 133

f  410.953-0494

 

 

 



Date Index | Thread Index | Problems or questions? Contact list-master@nist.gov