FIPS
What is FIPS?
Federal Information Processing Standards, US government standards for computer systems used by non-military federal agencies and government contractors.
Terms that appear alongside fips
Each of these is named in at least one of the same controls as fips. The number is how many controls name both.
- nist 43 shared controls
- encryption 22 shared controls
- confidentiality 19 shared controls
- fedramp 16 shared controls
- audit 15 shared controls
- integrity 14 shared controls
- tls 13 shared controls
- nist sp 800 53 13 shared controls
Frameworks that govern fips
What the standards actually require on fips
Requirements naming fips across 6 standards, quoted from the control text.
Section 9.3 of IRS Publication 1075 establishes the technical and procedural security controls + by inheritance from NIST SP 800-53 Rev 5 Security and Privacy Controls for Information Systems and Organizations.
IRSPub1075-Section93-NIST800-53-Inheritance-IRSModerate-Plus-Baseline-FIPS199-HIGH-Confidentiality · IRS Publication 1075 Section 9.3 + NIST SP 800-53 Rev 5 Inheritance + IRS Moderate-Plus Baseline (Not Just Moderate, Less Than High) + FIPS 199 Confidentiality HIGH for FTI + 18 Control Families + 200+ Controls →Implement CNSA 2.0 algorithms using cryptographic modules validated under the NIST/CCCS Cryptographic Module Validation Program (FIPS 140-3).
CNSA2-CMVP · FIPS 140-3 Validated Modules (CMVP) →RBI AA Ecosystem orchestrates Financial Information Providers (FIPs) + Financial Information Users (FIUs) through standardised APIs enabling interoperability across regulated entities.
RBI-AA-Ecosystem-FIPs-FIUs-Interoperability-Onboarding-Sahamati-DPI-IndiaStack · RBI AA Ecosystem - Financial Information Providers (FIPs) + Financial Information Users (FIUs) + Interoperability + Sahamati SRO Onboarding + DPI India Stack + Cross-Sector Regulators →Implement FIPS 204 ML-DSA (Module-Lattice-Based Digital Signature Algorithm) based on CRYSTALS-Dilithium for digital signatures + authentication + non-repudiation.
PQC-3 · FIPS 204 ML-DSA Implementation - Module-Lattice Digital Signature →FISMA is operationalized through NIST publications (mandatory per 44 USC 3553(e) + NIST FISMA Implementation Project). NIST SP 800-53 REV 5 (Security and Privacy Controls): 1,189 controls + control enhancements across 20 families (AC + AT + AU + CA + CM + CP +...
FISMA-NIST-800-53-RMF-800-171-FIPS · Operationalisation via NIST 800-53 + 800-37 RMF + 800-171 + FIPS 199 + FIPS 200 →Employ FIPS-validated cryptography when used to protect the confidentiality of CUI.
SP800-171-3.13.11 · Employ FIPS-validated cryptography →Questions people ask about fips
What is FIPS?
Why is FIPS important for compliance?
Which compliance frameworks address FIPS?
Where can I learn more about FIPS?
See how FIPS applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.