That's fairly analogous to the current NIST regulations. Unfortunately, NIST has been dragging 140-3 in draft form on for years. 140-2 was written in the 1980

That's fairly analogous to the current NIST regulations. Unfortunately, NIST has been dragging 140-3 in draft form on for years. 140-2 was written in the 1980's and reflects very badly on current hardware and software practices. Another area you could look into is Common Criteria. I find these certifications to be much more modern. I've taken products through both processes. If you're going for more than the basic levels they can be quite rigorous and thorough.