Study. uk . com
  1. Home
  2. All questions
  3. Question 228

CISSP study material · question 228 of 500

A Canadian subsidiary asks whether a module validated by the programme that tests against FIPS 140-3 will be accepted on both sides of the border. What is the position?

  1. Validation is recognised only in the United States; Canada operates a separate scheme.
  2. Validation is recognised internationally through ISO rather than by either government.
  3. The programme is run jointly by NIST and the Canadian Centre for Cyber Security, and federal agencies in both countries accept validated modules.
  4. Validation is recognised in Canada only for modules manufactured there.
Show the answer

Answer: C. The programme is run jointly by NIST and the Canadian Centre for Cyber Security, and federal agencies in both countries accept validated modules.

The Cryptographic Module Validation Program is a joint effort of NIST and the Canadian Centre for Cyber Security, and modules it validates are accepted by federal agencies of both countries.

Source: NIST FIPS 140-3 (NIST) — FIPS 140-3 > 3. Explanation

Challenge yourself on this topic → Study as cards