DataTerminology.comNEW
Also known as: Federal Information Processing Standards
U.S. federal standards specifying requirements for information processing, security, and certain code sets.
DESCRIPTION
Federal Information Processing Standards (FIPS) are publicly announced standards developed by NIST for U.S. federal agencies and their contractors. They cover areas such as cryptographic modules (FIPS 140-3), secure hashing, and certain coding systems historically used for geographic identification. FIPS standards guide procurement and compliance across federal systems and often influence industry practices. Some FIPS code sets have been withdrawn in favor of ISO standards, while security-focused FIPS remain central to federal compliance.
ALTERNATIVE DEFINITIONS
National Institute of Standards and Technology (NIST)
Federal Information Processing Standards (FIPS) are standards and guidelines for federal computer systems developed by NIST for use by the federal government.
Defines scope as federal systems and NIST’s role.
NIST Computer Security Resource Center
FIPS publications are issued by NIST to establish requirements for various aspects of federal information processing.
Highlights publications as requirement-setting instruments.
RELATED TERMS
NIST Special Publications FIPS 140-3 FIPS Country Codes ISO 3166 USPS State Codes Encryption Standards Compliance
COMPETING TERMS
ISO Standards
KNOWLEDGE AREAS
Data Security Data Management Reference & Master Data Data Governance
TARGET AUDIENCE
Data Architect Data Steward Data Governance Manager Cloud Architect Chief Information Officer Chief Technology Officer
EXTERNAL SOURCES
- Wikipedia - Federal Information Processing Standards
- NIST CSRC - FIPS 140-3 cryptographic modules
- NIST CSRC - FIPS 199 security categorization
TOP QUESTIONS
Why are FIPS important for federal systems?
They provide mandatory requirements for security and processing, ensuring consistent compliance across agencies and contractors.
Category: Relevancy
Do FIPS code sets still apply for geography?
Many geographic FIPS codes were withdrawn or superseded by ISO and GNIS standards; verify current status.
Category: Topic
What is the most referenced FIPS security standard?
FIPS 140-3 for cryptographic modules is widely required in federal environments.
Category: Example
How do FIPS differ from NIST Special Publications?
FIPS are formal standards with mandates; NIST SPs provide guidance and frameworks that may be referenced by FIPS.
Category: Comparison
What risks arise if cryptography is not FIPS-validated?
Systems may fail compliance audits, risking contract loss and security exposure.
Category: Risks
How often are FIPS updated?
Updates vary by standard; monitor NIST CSRC for revisions and transition timelines.
Category: Management
What is a common mistake with FIPS compliance?
Assuming library support implies validation; only specific versions and modules are FIPS-validated.
Category: Mistakes
How to start implementing FIPS controls?
Identify applicable FIPS, use validated modules, and map to agency requirements and NIST SP controls.
Category: Getting Started
Are FIPS relevant outside the U.S.?
Yes; global vendors often support FIPS for U.S. federal markets, influencing broader industry practices.
Category: Relevancy