Deconstructing FIPS 140-3: Myth #3 – FIPS Validation Is Just a Documentation Exercise
By the time organizations begin planning for FIPS 140-3 validation, they usually understand that documentation is required. Security policies, design documentation, finite state models, and other artifacts are all necessary components of the validation package. ...