Information Technology Laboratory (ITL)

ITL's Experience Undergoing the ANSI SDO Accreditation Process

Michael D. HoganITL Standards Liaison

310-975-2926m.hogan@nist.gov

U.S. Department of Commerce

History

•NIST ITL (and its predecessor organizations) has been accredited by ANSI to develop voluntary consensus standards as a sponsor using the ANSI Canvass Method since October 5, 1984 for the following scope of activities:

"Standards and guidelines for information exchange relating to automatic data processing and related systems".

•While we have developed a few American National Standards under ANSI’s accreditation, we now maintain our accreditation for one standard, which has now had five editions: 1986; 1993; 1997; 2000.•Latest edition: ANSI/NIST-ITL 1-2007 - Data Format for the Interchange of Fingerprint, Facial, & Other Biometric Information - Part 1•A Part 2, XML, version is under development. •Quickly became a de facto international standard used by:

– FBI’s Integrated Automated Fingerprint Identification System ;

– Royal Canadian Mounted Police, Scotland Yard , Interpol, etc.•See: http://www.itl.nist.gov/ANSIASD/

U.S. Department of Commerce

Compliance, Procedures, and Audits

•ANSI requires an annual compliance review to the latest version of the ANSI Essential Requirements. •Through 2002 , ANSI provided mandatory procedures for canvass sponsors to follow.•Since 2003, all canvass sponsors, such as NIST ITL, were required to develop their own standalone procedures.•ANSI provided guidance that made the development of our standalone procedures relatively straightforward.•ANSI reviews and approves each edition of an accredited standards developer’s procedures.•ANSI initiated an audit program in 1995.•ANSI audit program ensures that accredited standards developers are following their approved procedures.•NIST ITL has been “successfully” audited in 1996, 2001, and 2007.

U.S. Department of Commerce

Observations

•Annual compliance reviews keeps us aware of changes to ANSI requirements.•Approval of our procedures keeps us knowledgeable of our process.•Periodic ANSI audits keeps us motivated to follow our process.•ANSI staff is an excellent resource for advice.

U.S. Department of Commerce