Hi All,
The NSA just published DoD Microelectronics: Third-Party IP Review Process for Level of Assurance 1.
This report outlines a design review methodology sufficient to validate that third-party intellectual property (3PIP) is appropriate to incorporate into a Level of Assurance 1 (LoA1) system. In this context, 3PIP refers to functions whose development is not under the designer's control. Use of the phrase "intellectual property," IP, or 3PIP in outlining this methodology of design review does not refer to property rights, such as, for example, copyrights, patents, or trade secrets. It is the responsibility of the party seeking review and/or the reviewer to ensure that any rights needed to perform the review in accordance with the methodology outlined are obtained.
------------------------------
Michael Roza CPA, CISA, CIA, CC, MBA, Exec MBA
------------------------------