2008-08-31 13:19:08 +00:00
|
|
|
<?xml version="1.0" encoding="utf-8"?>
|
|
|
|
|
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN"
|
|
|
|
|
"http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd">
|
|
|
|
|
<html xmlns="http://www.w3.org/1999/xhtml">
|
|
|
|
|
<head>
|
|
|
|
|
<title>
|
|
|
|
|
CACert Organisation Assurance Program sub-policy for Austria
|
|
|
|
|
</title>
|
|
|
|
|
</head>
|
|
|
|
|
<body>
|
|
|
|
|
<h1> <font color="blue">Organisation Assurance - sub-policy for Austrian organisations</font></h1>
|
|
|
|
|
<p>
|
|
|
|
|
<a href="../PolicyOnPolicy.html"><img src="../cacert-draft.png" alt="CAcert Work In Progress" height="31" width="88" style="border-style: none;" /></a><br />
|
|
|
|
|
Author: Philipp Guehring<br />
|
|
|
|
|
Creation date: WIP 2008-01-21 V0.1<br />
|
|
|
|
|
Status: <font="green">DRAFT</font> 2008-02-03<br />
|
|
|
|
|
Next status: POLICY 2008<br />
|
2008-09-23 11:24:42 +00:00
|
|
|
Overruled from 2008-09-20 by: <a href="OrganisationAssuranceSubPolicyEurope.html">Organisation Assurance Sub-Policy Europe</a>
|
2008-08-31 13:19:08 +00:00
|
|
|
<!-- $Id: OrganisationAssurance-SubPolAustria.html 746 2008-04-04 16:03:48Z teus $ -->
|
|
|
|
|
</p>
|
|
|
|
|
|
|
|
|
|
<h2>0. Preliminaries</h2>
|
|
|
|
|
This sub-policy describes how Organisation Assurers ("OAs") conduct assurances on Austrian organisations.
|
|
|
|
|
It fits within the overall web-of-trust or assurance process and the Organisation Assurance Policy (OAP) of CAcert.
|
|
|
|
|
<br><br><br>
|
|
|
|
|
|
|
|
|
|
<h2>1. Purpose</h2>
|
|
|
|
|
This is a subsidiary policy to the OAP.
|
|
|
|
|
<br><br>
|
|
|
|
|
a. This sub-policy is applicable for the assurance of Austrian organisations only.<br>
|
|
|
|
|
b. This sub-policy is an implementation of the OAP.<br>
|
|
|
|
|
c. In the below, where the Assurance Officer (AO) is referred to, this includes his local delegate.
|
|
|
|
|
<br><br><br>
|
|
|
|
|
|
|
|
|
|
<h2>2. Organisation Assurers</h2>
|
|
|
|
|
|
|
|
|
|
<h2>2.1 Requirements for the Organisation Assurer</h2>
|
|
|
|
|
In addition to the requirements defined in the OAP, an OA must meet the following requirements for assuring Austrian organisations:<br>
|
|
|
|
|
a. Knowledge on common legal forms of organisations in Austria.<br>
|
|
|
|
|
<br><br><br>
|
|
|
|
|
|
|
|
|
|
<h2>3. Process</h2>
|
|
|
|
|
|
|
|
|
|
<h2>3.1 Organisations</h2>
|
|
|
|
|
Acceptable organisations under this sub-policy must be:
|
|
|
|
|
<br><br>
|
|
|
|
|
a. Organisations existing under the rules of the Austrian jurisdiction, and <br>
|
|
|
|
|
b. Organisations must not be revoked by a competent authority with direct oversight over the organisation.
|
|
|
|
|
<br><br>
|
|
|
|
|
|
|
|
|
|
<h2>3.2 Documents</h2>
|
|
|
|
|
The organisation has to provide documents to prove the essential standard of Organisation Assurance as defined in the policy:<br>
|
|
|
|
|
a. The primary mechanism to prove existence is to get an official extract from the official register, either via an online interface
|
|
|
|
|
or via physical means (organisation is asked to carry the costs)<br>
|
|
|
|
|
b. Where not available, an official document will be required from the company, subject to such checks as defined by the AO.<br>
|
|
|
|
|
c. Extracts from the official register should not be older than 4 weeks.<br>
|
|
|
|
|
d. The OA may ask for additional documents if needed to validate required information for the assurance action.
|
|
|
|
|
<br><br>
|
|
|
|
|
|
|
|
|
|
<h2>3.3 COAP</h2>
|
|
|
|
|
In addition to the checks defined in the policy, the COAP form for Austrian organisations requires:<br>
|
|
|
|
|
a. The OA must keep all documentation for 10 years.<br>
|
|
|
|
|
b. Signatures from organisation officials must meet the following requirements<br>
|
|
|
|
|
i. as legally specified for the type of organisation, and<br>
|
|
|
|
|
ii. as specified in the official documents (f.e. the excerpt from the register), and<br>
|
|
|
|
|
iii. as delegated within the organisation (proof of delegation needed)
|
|
|
|
|
|
|
|
|
|
<h2>3.4 Meeting</h2>
|
|
|
|
|
The OA can decide to demand a face to face meeting in the office of the requesting organisation, to verify
|
|
|
|
|
the authorisation of the request.
|
|
|
|
|
|
|
|
|
|
<h2>3.5 Price</h2>
|
|
|
|
|
<p>
|
|
|
|
|
The OA must inform the requestor about any upcomming costs and fees, and get the confirmation from the requestor.
|
|
|
|
|
</p>
|
|
|
|
|
<p>
|
|
|
|
|
<a href="http://validator.w3.org/check?uri=referer"><img src="http://www.w3.org/Icons/valid-xhtml11-blue" alt="Valid XHTML 1.1" height="31" width="88" style="border-style: none;" /></a>
|
|
|
|
|
</p>
|
|
|
|
|
</body>
|
|
|
|
|
</html>
|
|
|
|
|
|
