Federal Security Mandates: An Update on HSPD-12 and FIPS-201

From August 2004 to May 2007: What has happened with the government unified identity card?

“Everyone is after the hundreds of millions of federal money that they think is waiting,” Bordes says. “But if the federal market doesn't develop as planned then the marketing focus will move to the private sector. The day [the federal government] adopted FIPS-201, they made everything on the street obsolete. Now the industry is changing to meet FIPS.”

Wine, on the other hand, is outspoken in his support for HSPD-12 and FIPS-201. “FIPS-201 is a positive change and will, in the end, add to the knowledge base, enhance the security process, and drive progress,” he says.

Lastly, what is the impact of HSPD-12 and FIPS-201 on the private sector? Whether this project is a migration, a transition or a flash cutover, it seems certain that there will be changes in access controls for the federal government. Remember, the real value received is best assessed over time.

HSPD-12 and FIPS-201 will:

• Lead to the creation of trusted cards and readers that are interoperable. There is direct application of these vetted products in the private sector;

• Establish a de facto standardization for access control products and software;

• Bring about a convergence of access control suppliers for both physical and logical systems;

• Focus the private sector on standards, such as NIST and ISO; and

• Lead to the development of similar federal regulations for public companies within five years.

About the author: Bob Wynn is the former CISO for the State of Georgia. His 20 years in the security field include experience in senior security management, infrastructure protection, computer crime investigations, policy writing and regulatory compliance. For six years, Mr. Wynn has been an instructor at the FBI National Academy in Quantico, Va., specializing in cyber-terrorism, trends in computer crime, and the behaviors and the motivations of computer-aided criminals.

Join SecurityInfoWatch.com for a webinar on HSPD-12, to be held live on May 24, 2007. Registration is free; sign up today