After the US government shutdown at the end of 2018 / beginning of 2019, the CMVP queue of FIPS 140-2 reports is in better shape than it was after the shutdown of 2013.
![](https://keypair.us/wp-content/uploads/2019/01/Screen-Shot-2019-01-29-at-2.26.13-PM.png)
In the graph above, shorter bars are better than taller bars. The values are from the Modules in Process List after the shutdowns of 2013 and 2018/2019.
The blue bars represent the number of FIPS 140-2 reports that need to be reviewed by the CMVP. The green bars represent the number of reports reviewed by the CMVP and now require responses from the vendors/consultants/FIPS labs (there’s usually less effort required from the CMVP in the “Coordination” phase).
What does this all mean? Back in 2013, I estimated 8 months for the CMVP queue (this is the time it takes for a report to move from “Pending” to “Coordination”). In 2019, I am estimating the current CMVP queue time to be 2-3 months.
If you have questions or comments about the CMVP queue, please contact [email protected]
KeyPair Consulting – expert guidance to meet your FIPS 140-2 goals