|
|
|
|
@ -8,19 +8,34 @@
|
|
|
|
|
</title>
|
|
|
|
|
</head>
|
|
|
|
|
<body>
|
|
|
|
|
<h1>
|
|
|
|
|
Organisation Assurance Policy
|
|
|
|
|
</h1>
|
|
|
|
|
<p>
|
|
|
|
|
<a href="../PolicyOnPolicy.html"><img src="../cacert-draft.png" alt="CAcert Draft" height="31" width="88" style="border-style: none;" /></a><br />
|
|
|
|
|
Author: Jens Paul<br />
|
|
|
|
|
Creation date: 2007-09-18<br />
|
|
|
|
|
Status: DRAFT 2007-09-18<br />
|
|
|
|
|
Changed: 2008-04-01 Teus Hagen policy list vote<br />
|
|
|
|
|
Next status: POLICY 2008<br />
|
|
|
|
|
<!-- $Id$ -->
|
|
|
|
|
</p>
|
|
|
|
|
<h2> 0. Preliminaries </h2>
|
|
|
|
|
<p>
|
|
|
|
|
<center>
|
|
|
|
|
<big>
|
|
|
|
|
<br><b>WARNING:</b><br>
|
|
|
|
|
The proper policy document is located<br>
|
|
|
|
|
<a href="http://www.cacert.org/policy/OrganisationAssurancePolicy.php">
|
|
|
|
|
on the CAcert website </a>.<br>
|
|
|
|
|
</big></b>
|
|
|
|
|
This document is a working draft to include<br>
|
|
|
|
|
future revisions only, and is currently<br>
|
|
|
|
|
only relevant for the [policy] group.<br>
|
|
|
|
|
</center>
|
|
|
|
|
</p>
|
|
|
|
|
|
|
|
|
|
<h1>
|
|
|
|
|
Organisation Assurance Policy
|
|
|
|
|
</h1>
|
|
|
|
|
<p>
|
|
|
|
|
<a href="../PolicyOnPolicy.html"><img src="../cacert-draft.png" alt="CAcert Draft" height="31" width="88" style="border-style: none;" /> </a><br />
|
|
|
|
|
Document: OAP COD11<br />
|
|
|
|
|
Author: Jens Paul<br />
|
|
|
|
|
Creation date: 2007-09-18<br />
|
|
|
|
|
Status: POLICY 2007-09-18 <a href="http://wiki.cacert.org/wiki/TopMinutes-20070917">m20070918.x </a><br />
|
|
|
|
|
Changed: 2008-04-01 Teus Hagen policy list vote; add advisors and board<br />
|
|
|
|
|
Next status: POLICY 2008-4-08<br />
|
|
|
|
|
<!-- $Id$ -->
|
|
|
|
|
</p>
|
|
|
|
|
<h2> <a name="0">0. </a> Preliminaries </h2>
|
|
|
|
|
|
|
|
|
|
<p>
|
|
|
|
|
This policy describes how Organisation Assurers ("OAs")
|
|
|
|
|
@ -34,7 +49,7 @@ This policy is not a Controlled document, for purposes of
|
|
|
|
|
Configuration Control Specification ("CCS").
|
|
|
|
|
</p>
|
|
|
|
|
|
|
|
|
|
<h2> 1. Purpose </h2>
|
|
|
|
|
<h2> <a name="1"> 1. </a> Purpose </h2>
|
|
|
|
|
|
|
|
|
|
<p>
|
|
|
|
|
Organisations with assured status can issue certificates
|
|
|
|
|
@ -58,9 +73,9 @@ and as described in the CPS.
|
|
|
|
|
</li></ul>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
<h2> 2. Roles and Structure </h2>
|
|
|
|
|
<h2> <a name="2"> 2. </a> Roles and Structure </h2>
|
|
|
|
|
|
|
|
|
|
<h3> 2.1 Assurance Officer </h2>
|
|
|
|
|
<h3> <a name="2.1"> 2.1 </a> Assurance Officer </h2>
|
|
|
|
|
|
|
|
|
|
<p>
|
|
|
|
|
The Assurance Officer ("AO")
|
|
|
|
|
@ -78,7 +93,7 @@ The OA is appointed by the Board.
|
|
|
|
|
Where the OA is failing the Board decides.
|
|
|
|
|
</p>
|
|
|
|
|
|
|
|
|
|
<h3> 2.2 Organisation Assurers </h3>
|
|
|
|
|
<h3> <a name="2.2"> 2.2 </a> Organisation Assurers </h3>
|
|
|
|
|
|
|
|
|
|
<p>
|
|
|
|
|
</p>
|
|
|
|
|
@ -132,7 +147,7 @@ Where the OA is failing the Board decides.
|
|
|
|
|
|
|
|
|
|
</ol>
|
|
|
|
|
|
|
|
|
|
<h3> 2.3 Assurance Advisors </h3>
|
|
|
|
|
<h3> <a name="2.3"> 2.3 </a> Assurance Advisors </h3>
|
|
|
|
|
<p>In countries/states/provinces where no OA Assurers are
|
|
|
|
|
operating for an OA Application (COAP) the OA
|
|
|
|
|
can be advised by an experienced local CAcert
|
|
|
|
|
@ -146,7 +161,7 @@ Where the OA is failing the Board decides.
|
|
|
|
|
</p>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
<h3> 2.4 Organisation Administrator </h3>
|
|
|
|
|
<h3> <a name="2.4"> 2.4 </a> Organisation Administrator </h3>
|
|
|
|
|
|
|
|
|
|
<p>
|
|
|
|
|
The Administrator within each Organisation ("O-Admin")
|
|
|
|
|
@ -176,9 +191,9 @@ and the issuing of certificates.
|
|
|
|
|
</ol>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
<h2> 3. Policies </h2>
|
|
|
|
|
<h2> <a name="3"> 3. </a> Policies </h2>
|
|
|
|
|
|
|
|
|
|
<h3> 3.1 Policy </h3>
|
|
|
|
|
<h3> <a name="3.1"> 3.1 </a> Policy </h3>
|
|
|
|
|
|
|
|
|
|
<p>
|
|
|
|
|
There is one policy being this present document,
|
|
|
|
|
@ -192,7 +207,7 @@ and several subsidiary policies.
|
|
|
|
|
<li> Organisations are assured under an appropriate subsidiary policy. </li>
|
|
|
|
|
</ol>
|
|
|
|
|
|
|
|
|
|
<h3> 3.2 Subsidiary Policies </h3>
|
|
|
|
|
<h3> <a name="3.2"> 3.2 </a> Subsidiary Policies </h3>
|
|
|
|
|
|
|
|
|
|
<p>
|
|
|
|
|
The nature of the Subsidiary Policies ("SubPols"):
|
|
|
|
|
@ -222,7 +237,7 @@ The nature of the Subsidiary Policies ("SubPols"):
|
|
|
|
|
policy approval process.
|
|
|
|
|
</li></ol>
|
|
|
|
|
|
|
|
|
|
<h3> 3.3 Freedom to Assemble </h3>
|
|
|
|
|
<h3> <a name="3.3"> 3.3 </a> Freedom to Assemble </h3>
|
|
|
|
|
|
|
|
|
|
<p>
|
|
|
|
|
Subsidiary Policies are open, accessible and free to enter.
|
|
|
|
|
@ -255,9 +270,9 @@ Subsidiary Policies are open, accessible and free to enter.
|
|
|
|
|
</li></ol>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
<h2> 4. Process </h2>
|
|
|
|
|
<h2> <a name="4"> 4. </a> Process </h2>
|
|
|
|
|
|
|
|
|
|
<h3> 4.1 Standard of Organisation Assurance </h2>
|
|
|
|
|
<h3> <a name="4.1"> 4.1 </a> Standard of Organisation Assurance </h3>
|
|
|
|
|
<p>
|
|
|
|
|
The essential standard of Organisation Assurance is:
|
|
|
|
|
</p>
|
|
|
|
|
@ -277,7 +292,9 @@ The essential standard of Organisation Assurance is:
|
|
|
|
|
requestor can sign on behalf of the organisation.
|
|
|
|
|
</li><li>
|
|
|
|
|
the organisation has agreed to the terms of the
|
|
|
|
|
Registered User Agreement,
|
|
|
|
|
<b>
|
|
|
|
|
CAcert Community Agreement
|
|
|
|
|
</b>,
|
|
|
|
|
and is therefore subject to Arbitration.
|
|
|
|
|
</li></ol>
|
|
|
|
|
|
|
|
|
|
@ -286,7 +303,7 @@ The essential standard of Organisation Assurance is:
|
|
|
|
|
are stated in the SubPol.
|
|
|
|
|
</p>
|
|
|
|
|
|
|
|
|
|
<h3> 4.2 COAP </h2>
|
|
|
|
|
<h3> <a name="4.2"> 4.2 </a> COAP </h2>
|
|
|
|
|
<p>
|
|
|
|
|
The COAP form documents the checks and the resultant
|
|
|
|
|
assurance results to meet the standard.
|
|
|
|
|
@ -307,7 +324,10 @@ Additional information to be provided on form:
|
|
|
|
|
</li><li>
|
|
|
|
|
domain name(s)
|
|
|
|
|
</li><li>
|
|
|
|
|
Agreement with registered user agreement.
|
|
|
|
|
Agreement with
|
|
|
|
|
<b>
|
|
|
|
|
CAcert Community Agreement
|
|
|
|
|
</b>.
|
|
|
|
|
Statement and initials box for organsation
|
|
|
|
|
and also for OA.
|
|
|
|
|
</li><li>
|
|
|
|
|
@ -323,7 +343,7 @@ and indication provided that the English is the
|
|
|
|
|
ruling language (due to Arbitration requirements).
|
|
|
|
|
</p>
|
|
|
|
|
|
|
|
|
|
<h3> 4.3 Jurisdiction </h3>
|
|
|
|
|
<h3> <a name="4.3"> 4.3 </a> Jurisdiction </h3>
|
|
|
|
|
|
|
|
|
|
<p>
|
|
|
|
|
Organisation Assurances are carried out by
|
|
|
|
|
@ -333,7 +353,9 @@ Actions carried out by OAs are under this regime.
|
|
|
|
|
|
|
|
|
|
<ol type="a"><li>
|
|
|
|
|
The organisation has agreed to the terms of the
|
|
|
|
|
Registered User Agreement,
|
|
|
|
|
<b>
|
|
|
|
|
CAcert Community Agreement
|
|
|
|
|
</b>,
|
|
|
|
|
</li><li>
|
|
|
|
|
The organisation, the Organisation Assurers, CAcert and
|
|
|
|
|
other related parties are bound into CAcert's jurisdiction
|
|
|
|
|
@ -341,12 +363,15 @@ Actions carried out by OAs are under this regime.
|
|
|
|
|
</li><li>
|
|
|
|
|
The OA is responsible for ensuring that the
|
|
|
|
|
organisation reads, understands, intends and
|
|
|
|
|
agrees to the registered user agreement.
|
|
|
|
|
agrees to the
|
|
|
|
|
<b>
|
|
|
|
|
CAcert Community Agreement
|
|
|
|
|
</b>.
|
|
|
|
|
This OA responsibility should be recorded on COAP
|
|
|
|
|
(statement and initials box).
|
|
|
|
|
</li></ol>
|
|
|
|
|
|
|
|
|
|
<h2> 5. Exceptions </h2>
|
|
|
|
|
<h2> <a name="5"> 5. </a> Exceptions </h2>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
<ol type="a"><li>
|
|
|
|
|
@ -378,7 +403,7 @@ Actions carried out by OAs are under this regime.
|
|
|
|
|
is not accepted without further proof.
|
|
|
|
|
</li></ol>
|
|
|
|
|
<p>
|
|
|
|
|
<a href="http://validator.w3.org/check?uri=referer"><img src="http://www.w3.org/Icons/valid-xhtml11-blue" alt="Valid XHTML 1.1" height="31" width="88" style="border-style: none;" /></a>
|
|
|
|
|
<a href="http://validator.w3.org/check?uri=referer"><img src="http://www.w3.org/Icons/valid-xhtml11-blue" alt="Valid XHTML 1.1" height="31" width="88" style="border-style: none;" /> </a>
|
|
|
|
|
</p>
|
|
|
|
|
</body>
|
|
|
|
|
</html>
|
|
|
|
|
|
Teus Hagen
17 years ago