2 Recommendations

The S.E.E. Team proposes that you:

2.1.1 Note that the Certificate Policy (CP) forms the basis of the accreditation and ongoing obligations of  the Certification Authority (CA).

2.1.2 Agree to use the Evidence of audit approach to accreditation.

2.1.3 Agree that the S.E.E. PKI Team conduct the accreditation of at least the first CA, and report back on resource implications.

2.1.4 Note that CAs will be required to provide resource to the accreditation process, may need to pay for auditors to audit their operations, and may need to invest further in their operations to meet S.E.E. requirements.

2.1.5 Request that the Government Communications Security Bureau (GCSB) perform technical audits of NZ based Certification Authorities on request from the S.E.E. Steering Group.