diff --git a/TTPAssistedAssurancePolicy.html b/TTPAssistedAssurancePolicy.html index 468eb07..1e33d51 100644 --- a/TTPAssistedAssurancePolicy.html +++ b/TTPAssistedAssurancePolicy.html @@ -22,6 +22,10 @@ color : blue; font-weight: bold; } +.strike { + color : blue; + text-decoration:line-through; +} --> @@ -31,26 +35,35 @@

TTP-Assisted Assurance Policy

- CAcert Policy Status + CAcert Policy Status Editor: Iang
Creation Date : 20091215
- Status: WIP 20100202
+ Status: WIP 20100705
+ Licence: CC-by-sa/DRP

0. Preliminaries

This sub-policy extends the - + Assurance Policy ("AP" => COD13) by specifying how Assurers can be assisted by outsourcing the identity documents verification component of assurance to trusted third parties (TTPs). + + Definitions can be found in AP or in + Assurance Handbook + ("AH"). +

1. Scope

This sub-policy is restricted to members located in areas not well-served with Assurers. + + It serves a goal of promoting both Assurers and Members is those areas. +

2. Roles

@@ -63,26 +76,34 @@ Notaries (European), bank managers, accountants and lawyers.

-

+

The Board maintains a list of approved classes of TTP and forms of documents. The list is expected to vary according to the different juridical traditions of different regions.

-

2.2 The Assurer

+

2.2 The Assurer (aka TTP-admin)

uli: (Synonyms: TTP-Assurer, TTP-Admin)

-

+

To employ a TTP in an assurance, - the Assurer must have 50 experience points, - and pass other checks as imposed by the Board - from time to time. + the Assurer must + + be a Senior Assurer. + + + have 50 experience points, and pass other checks as imposed by the Board from time to time. + The Assurer must be familiar with the local language and customs.

-

uli: Needs the TTP-Admin be appointed ? Who appoints TTP-Admins ? AO ? Board ?
- In the past, the TTP-admin was appointed by the board or was the Secretarys duty.

- + + + +

2.3 Member

@@ -92,6 +113,31 @@

3. The Assurance

+

Iang: I suggest this be section 3:

+

+ Assurance assisted by TTP must meet these requirements: +

+
  1. + The Assurer must positively confirm the identity and + suitability of the TTP. +
  2. + The TTP and the Member must meet face-to-face. +
  3. + The TTP confirms the details supporting the Assurance Statement. +
  4. + The Assurer makes a reliable statement to confirm the + Assurance Statement. +
  5. + + Assurance must be marked as TTP-Assisted + (e.g., by use of TTPAdmin flag). + +
+ +

And all the rest in pink box be pushed into the HANDBOOK. This way, the policy sets requirements and standards, and AO is responsible for meeting them as a PRACTICE.

+ +
+

These steps are taken.

@@ -235,6 +281,8 @@ +
+

4. Assurance Officer ("AO")

The Board routinely delegates its responsibilities to the @@ -247,9 +295,18 @@ on performance of this policy for the association's annual report.

+

4.1 Practice

- Assurance Officer should prepare documentation + Assurance Officer should prepare + + a detailed documentation under + AH + that meets the needs of this policy, including: + + + documentation to support the TTP-assisted Assurance, including: +

+ +

4.2 Deserts

- The Assurance Officer maintains - a list of classes of TTPs, divided into regions. + + The Assurance Officer maintains a list of regions + that are designated as 'deserts,' being areas that are so short + of Assurers as to render face-to-face Assurance impractical. + In each region, approved types of TTP are listed (e.g., Notary). + The list is expected to vary according to the + different juridical traditions of different regions. + Changes to the regional lists are prepared by either an Organisation Assurer for that region (as described by OAP) @@ -274,7 +345,11 @@ Changes are then submitted to the Board for approval.

- Use of a TTP not on the list must be approved by Board. + Use of a type of TTP not on the list must be approved by + + AO and notified to + + Board. It is an explicit goal to reduce the usage of TTP-assisted Assurances in favour of face-to-face Assurance. @@ -289,20 +364,52 @@ Officer may document and implement minor variations to this policy.

-

uli: did we discuss the points gained thru a TTP assurance?
- From the calculation with the 35 pts, a TTP assuree never can reach the 100 pts level ... +

5. Topup Assurance Points

+ + - Valid XHTML 1.1 -

+ +

+AO is to operate a topup Assurance programme +to help seed desert areas with Assurers. +

+ +

+A topup Assurance is conducted by a third Senior Assurer +according to the following requirements: +

+ +
  1. + Assurer must be a Senior Assurer. +
  2. + Assurer Challenge must be completed as passed by Member. +
  3. + The topup must be requested by Member for purpose of enabling the Member to reach Assurer level. +
  4. + The two TTP-Assisted Assurances already conducted are to be reviewed. +
  5. + Topup may award up to 35 points. +
  6. + Assurance must be marked as Topup + (e.g., by use of new feature with TTPAdmin flag). +
+ +

+Each topup is to be reported to AO. +Topup is only available in designated deserts. +