 The Validation Body has the ultimate responsibility for the operation of the CCEVS in accordance with NIAP policies and procedures.Where appropriate it will interpret and amend those policies and procedures.The NIST and NSA are responsible for providing sufficient resources to the NIAP so that the Validation Body may carry out its responsibilities.