sorry to tell you this, but read it this morning from nw:
"NIST 800-155 is already six months late, however I've been told by a gov't contact that it will be out this month, along with a draft special publication related to mobile security."
this is mostly good, right. but still it is another incomplete hurdle. doubt there will be a government sale before NIST 800-155 is complete.
are there other obstacles of this type out there? i would bet there are. we just don't hear about them. all we hear about is that pipeline. plugged as usual.
it really is an unbelievable story of not getting to go, let alone past it. really wish i hadn't wasted time on it after figuring the trust matrix idea in 2002. the story of the last decade was obstacle after obstacle after obstacle. every one hidden away or denied in favour of new expectations.