From 780dadd473bbe941f8cbe0aadac76e842b0a2271 Mon Sep 17 00:00:00 2001 From: Ian Grigg Date: Mon, 30 Apr 2012 12:55:53 +0000 Subject: [PATCH] rewording, new header, for Arbitration a20120121.1 git-svn-id: http://svn.cacert.org/CAcert/Policies@2372 14b1bab8-4ef6-0310-b690-991c95c89dfd --- .../OrganisationAssurancePolicy.html | 159 ++++++++---------- 1 file changed, 72 insertions(+), 87 deletions(-) diff --git a/OrganisationAssurancePolicy/OrganisationAssurancePolicy.html b/OrganisationAssurancePolicy/OrganisationAssurancePolicy.html index e38ce0d..bf2da05 100644 --- a/OrganisationAssurancePolicy/OrganisationAssurancePolicy.html +++ b/OrganisationAssurancePolicy/OrganisationAssurancePolicy.html @@ -2,54 +2,49 @@ - - - Organisation Assurance Policy - - - -

-

- -
WARNING:
- The proper policy document is located
- - on the CAcert website .
- - This document is a working draft to include
- future revisions only, and is currently
- only relevant for the [policy] group.
-
-

- -

- Organisation Assurance Policy -

-

- CAcert Draft
-Document: OAP COD11
-Author: Jens Paul
-Creation date: 2007-09-18
-Status: POLICY/DRAFT 2007-09-18 m20070918.x
-Changed: 2008-04-01 Teus Hagen policy list vote; add advisors and board
-Next status: POLICY 2008
- -

-

0. Preliminaries

+ + Organisation Assurance Policy + + + + +
+
+ Name: OAP COD11
+ Author: Jens Paul
+ Creation date: 2007-09-18
+ Status: POLICY/DRAFT 2007-09-18 m20070918.x
+ Licence: CC-by-sa+DRP
+ +		 + Security Policy Status == POLICY +
+
+ +

Organisation Assurance Policy

+ +

0. Preliminaries

This policy describes how Organisation Assurers ("OAs") -conduct Assurances on Organisations. -It fits within the overall web-of-trust -or Assurance process of CAcert. +conduct assurances on organisations. +Organisation assurance fits within the overall web-of-trust +or assurance process of CAcert.

-This policy is not a Controlled document, for purposes of -Configuration Control Specification ("CCS"). +This policy is subsidiary to Assurance Policy ("AP" COD13) and +is a Controlled document under +Configuration Control Specification ("CCS" COD2).

-

1. Purpose

+

1. Purpose

Organisations with assured status can issue certificates @@ -73,27 +68,27 @@ and as described in the CPS. -

2. Roles and Structure

+

2. Roles and Structure

-

2.1 Assurance Officer

+

2.1 Assurance Officer

-The Assurance Officer ("AO") +The Assurance Officer manages this policy and reports to the CAcert Inc. Committee ("Board").

-The AO manages all OAs and is responsible for process, +The Assurance Officer manages all OAs and is responsible for process, the CAcert Organisation Assurance Programme ("COAP") form, OA training and testing, manuals, quality control. In these responsibilities, other Officers will assist.

-The OA is appointed by the Board. -Where the OA is failing the Board decides. +The Assurance Officer is appointed by the Board +and may be replaced by the Board.

-

2.2 Organisation Assurers

+

2.2 Organisation Assurers

@@ -101,8 +96,8 @@ Where the OA is failing the Board decides.
  1. An OA must be an experienced Assurer
      -
    1. Have 150 assurance points.
      2. -
    2. Be fully trained and tested on all general Assurance processes.
      3. +
    3. Have 50 Experience Points.
      4. +
    4. Be fully trained and tested on all general assurance processes.
  2. @@ -126,6 +121,7 @@ Where the OA is failing the Board decides.
  3. Tests are conducted manually, not online/automatic.
  4. Documentation to be retained.
  5. Tests may include on-the-job components.
    6. +
  6. Final test to be a number of supervised organisation assurances.
  • @@ -134,37 +130,31 @@ Where the OA is failing the Board decides.
  • Two supervising OAs must sign-off on new OA, as trained, tested and passed.
    • -
  • AO must sign-off on a new OA, +
  • To appoint a new OA, the Assurance Officer must sign-off as supervised, trained and tested.
    • -
  • The OA can decide when a CAcert - (individual) Assurer - has done several OA Application Advises to appoint this - person to OA Assurer. -
    • -

    2.3 Organisation Assurance Advisor ("OAA")

    -

    In countries/states/provinces where no OA Assurers are - operating for an OA Application (COAP) the OA - can be advised by an experienced local CAcert - (individual) Assurer to take the decision - to accept the OA Application (COAP) of the organisation. +

    2.3 Local Assurer as Advisor

    +

    In countries/states/provinces where no OAs are + operating, the OA + may rely upon the advice of an experienced local CAcert + (individual) Assurer in performing the organisation assurance.

    - The local Assurer must have at least 150 Points, + The local Assurer must have at least 50 Experience Points, should know the language, and know the organisation trade office registry culture and quality.

    -

    2.4 Organisation Administrator

    +

    2.4 Organisation Administrator

    -The Administrator within each Organisation ("O-Admin") +The Administrator within each organisation ("O-Admin") is the one who handles the assurance requests and the issuing of certificates.

    @@ -191,9 +181,9 @@ and the issuing of certificates. -

    3. Policies

    +

    3. Policies

    -

    3.1 Policy

    +

    3.1 Policy

    There is one policy being this present document, @@ -207,7 +197,7 @@ and several subsidiary policies.

  • Organisations are assured under an appropriate subsidiary policy.
    • -

    3.2 Subsidiary Policies

    +

    3.2 Subsidiary Policies

    The nature of the Subsidiary Policies ("SubPols"): @@ -226,7 +216,7 @@ The nature of the Subsidiary Policies ("SubPols"):

  • For OAs, SubPol specifies the tests of local knowledge - including the local organisation assurance COAP forms. + including the local COAP forms.
  • For assurances, SubPol specifies the local documentation forms @@ -237,7 +227,7 @@ The nature of the Subsidiary Policies ("SubPols"): policy approval process.
    • -

    3.3 Freedom to Assemble

    +

    3.3 Freedom to Assemble

    Subsidiary Policies are open, accessible and free to enter. @@ -270,11 +260,11 @@ Subsidiary Policies are open, accessible and free to enter. -

    4. Process

    +

    4. Process

    -

    4.1 Standard of Organisation Assurance

    +

    4.1 Standard of Organisation Assurance

    -The essential standard of Organisation Assurance is: +The essential standard of organisation assurance is:

    1. @@ -292,9 +282,7 @@ The essential standard of Organisation Assurance is: requestor can sign on behalf of the organisation.
    2. the organisation has agreed to the terms of the - - CAcert Community Agreement - , + CAcert Community Agreement, and is therefore subject to Arbitration.
    @@ -303,7 +291,7 @@ The essential standard of Organisation Assurance is: are stated in the SubPol.

    -

    4.2 COAP

    +

    4.2 COAP

    The COAP form documents the checks and the resultant assurance results to meet the standard. @@ -325,11 +313,11 @@ Additional information to be provided on form: domain name(s)

  • Agreement with - CAcert Community Agreement. + CAcert Community Agreement. Statement and initials box for organisation and also for OA.
  • - Date of completion of Assurance. + Date of completion of assurance. Records should be maintained for 7 years from this date.
    • @@ -341,17 +329,17 @@ and indication provided that the English is the ruling language (due to Arbitration requirements).

    -

    4.3 Jurisdiction

    +

    4.3 Jurisdiction

    -Organisation Assurances are carried out by +Organisation assurances are carried out by CAcert Inc. under its Arbitration jurisdiction. Actions carried out by OAs are under this regime.

    1. The organisation has agreed to the terms of the - CAcert Community Agreement. + CAcert Community Agreement.
    2. The organisation, the Organisation Assurers, CAcert and other related parties are bound into CAcert's jurisdiction @@ -360,12 +348,12 @@ Actions carried out by OAs are under this regime. The OA is responsible for ensuring that the organisation reads, understands, intends and agrees to the - CAcert Community Agreement. + CAcert Community Agreement. This OA responsibility should be recorded on COAP (statement and initials box).
    -

    5. Exceptions

    +

    5. Exceptions

    1. @@ -396,8 +384,5 @@ Actions carried out by OAs are under this regime. This means that the anglo law tradition of unregistered DBAs is not accepted without further proof.
    -

    Valid XHTML 1.1 -

    - + -