Confirmed users
569
edits
CA/Audit Statements: Difference between revisions
Jump to navigation
Jump to search
m
→Providing Auditor Qualifications: Minor update
(→Audited Locations: Changed definition of Facility) |
m (→Providing Auditor Qualifications: Minor update) |
||
| Line 115: | Line 115: | ||
== Providing Auditor Qualifications == | == Providing Auditor Qualifications == | ||
<br /> | <br /> | ||
Mozilla's Root Store Policy requires CAs to have their auditor provide information about the auditor's qualifications when they provide audit statements. The information needs to be sufficient for us to see that the requirements listed above have been met by the audit team, but does not need to specifically name the individuals on the team, other than the lead auditor who signs the audit statement. The Audit Team may consist of one person provided that the person meets all criteria set out above and that there is an audit quality reviewer. | |||
CAs must submit a summary of the Audit Team's qualifications and experience, as outlined below with respect to the audit. The information can also be provided as part of the audit result documentation, like the [https://www.acab-c.com/downloads/ ETSI Audit Attestation Letter (AAL)], or as a supplement to the WebTrust Assurance Report. | CAs must submit a summary of the Audit Team's qualifications and experience, as outlined below with respect to the audit. The information can also be provided as part of the audit result documentation, like the [https://www.acab-c.com/downloads/ ETSI Audit Attestation Letter (AAL)], or as a supplement to the WebTrust Assurance Report. | ||