NSA just published DoD Microelectronics: Third-Party IP Review Process for Level of Assurance 2
This report outlines a methodology to perform a design review that is sufficient to validate a third-party intellectual property (3PIP) function for use within a Level of Assurance 2 (LoA2) system. In this context, 3PIP refers to functions whose development are not under the control of the designer. Use of the phrase "intellectual property", IP, or 3PIP in outlining this methodology of design review does not refer to property rights, such as, for example, copyrights, patents, or trade secrets. It is the responsibility of the party seeking review and/or the reviewer to ensure that any rights needed to perform the review in accordance with the methodology outlined are obtained.