40 likes | 238 Views
Information Technology Laboratory (ITL) ITL's Experience Undergoing the ANSI SDO Accreditation Process. Michael D. Hogan ITL Standards Liaison 310-975-2926 m.hogan@nist.gov. U.S. Department of Commerce. History.
E N D
Information Technology Laboratory (ITL) ITL's Experience Undergoing the ANSI SDO Accreditation Process Michael D. Hogan ITL Standards Liaison 310-975-2926 m.hogan@nist.gov U.S. Department of Commerce
History • NIST ITL (and its predecessor organizations) has been accredited by ANSI to develop voluntary consensus standards as a sponsor using the ANSI Canvass Method since October 5, 1984 for the following scope of activities: "Standards and guidelines for information exchange relating to automatic data processing and related systems". • While we have developed a few American National Standards under ANSI’s accreditation, we now maintain our accreditation for one standard, which has now had five editions: 1986; 1993; 1997; 2000. • Latest edition: ANSI/NIST-ITL 1-2007 - Data Format for the Interchange of Fingerprint, Facial, & Other Biometric Information - Part 1 • A Part 2, XML, version is under development. • Quickly became a de facto international standard used by: • FBI’s Integrated Automated Fingerprint Identification System ; • Royal Canadian Mounted Police, Scotland Yard , Interpol, etc. • See: http://www.itl.nist.gov/ANSIASD/ U.S. Department of Commerce
Compliance, Procedures, and Audits • ANSI requires an annual compliance review to the latest version of the ANSI Essential Requirements. • Through 2002 , ANSI provided mandatory procedures for canvass sponsors to follow. • Since 2003, all canvass sponsors, such as NIST ITL, were required to develop their own standalone procedures. • ANSI provided guidance that made the development of our standalone procedures relatively straightforward. • ANSI reviews and approves each edition of an accredited standards developer’s procedures. • ANSI initiated an audit program in 1995. • ANSI audit program ensures that accredited standards developers are following their approved procedures. • NIST ITL has been “successfully” audited in 1996, 2001, and 2007. U.S. Department of Commerce
Observations • Annual compliance reviews keeps us aware of changes to ANSI requirements. • Approval of our procedures keeps us knowledgeable of our process. • Periodic ANSI audits keeps us motivated to follow our process. • ANSI staff is an excellent resource for advice. U.S. Department of Commerce