Conformity Assessment Approach for Homeland Security ANSI HSSP October 2009

NIST Standards Services Division Conformity Assessment Roles Assist US Federal, State and Local Government Assist Industry Design and implementation of CA systems Standards for conformity assessment programs Coordinate and network with standards development organizations, government and industry Promote national and international standards Identify standards for government regulation, procurement and grant guidance Participate in the development of key standards

National Technology Transfer and Advancement Act Promotes private sector consensus standards for government use Establishes NIST role in coordination of conformity assessment

Advocate use of appropriate conformity assessment tools with their international norms Supplier’s Declaration Inspection Testing Certification Registration Accreditation ISO/IEC 17050 parts 1 and 2 ISO/IEC 17020 ISO/IEC 17025 ISO/IEC Guide 65 ISO/IEC 17021 ISO/IEC 17011

Factors in CA System Design The risks associated with non-compliance should be proportional to the rigor and independence of the CA system. System over-design will add too much cost. System Under-design will result in too little confidence of compliance. Penalties associated with non-compliance may reduce the needed rigor and independence of the conformity assessment system. Timely mechanisms that effectively remove non-compliant products from the market may also reduce the needed rigor and independence of the system.

Risk and Conformity Assessment How much confidence is needed? Perceived Risk Independence and Rigor of Conformity Assessment Supplier’s Declaration 1st party conformity assessment Certification 3rd party conformity assessment

Gordon Gillerman gordon.gillerman@nist.gov Chief Standards Services Division National Institute of Standards and Technology gordon.gillerman@nist.gov