Skip to content

ETSI TR 119 411-4 - Electronic Signatures and Trust Infrastructures (ESI); Policy and Security Requirements for Trust Service Providers issuing certificates; Part 4: Checklist supporting audit of TSP against ETSI EN 319 411-1 or ETSI EN 319 411-2 #395

@IshaiO

Description

@IshaiO

Formal name

ETSI TR 119 411-4 - Electronic Signatures and Trust Infrastructures (ESI); Policy and Security Requirements for Trust Service Providers issuing certificates; Part 4: Checklist supporting audit of TSP against ETSI EN 319 411-1 or ETSI EN 319 411-2

Overview

The present document is a checklist of the policy requirements specific to TSP issuing certificates (as expressed in ETSI EN 319 411-1 and ETSI EN 319 411-2 including the generic requirements which are independent of the type of service (as expressed in ETSI EN 319 401.
The checklist identifies each requirement associated with each certificate policy, as specified in ETSI EN 319 411-1 and ETSI EN 319 411-2, and also relates where relevant the requirement to a particular TSP component service. Additional fields are provided to allow TSPs to indicate claimed compliance to a particular requirement and for assessors to indicate the results of an assessment for each requirement. This checklist can be used by the TSP itself to prepare for an assessment of its practices against the referenced documents (i.e. serve as a basis for a self-declaration) and/or by the assessor when conducting the assessment. The present document does not specify how the requirements identified can be assessed by an independent party, including requirements for information to be made available to such independent assessors, or requirements on such assessors.
NOTE: See ETSI EN 319 403 for guidance on assessment of TSP's processes and services.

Note: Technical Reports can be very helpful as background material or supporting documentation, especially when trying to understand specific technical approaches or industry practices. However, it’s important to note that they do not carry the same normative weight as formal standards and, as such, cannot be directly referenced in the Implementing Acts

Work Plan

Tasks

There are no open tasks.

Alerts

  • Work Item adopted on the 10.6.25.

References

Metadata

Metadata

Assignees

No one assigned

    Labels

    Fn: QESFunctional: Qualified Electronic Signature, both for the Wallet and TSPsFn: Trust ServicesFunctional: Trust Servicessts: readyThe standard has a stable version publishedsts: technical reportThe document is a Technical Report

    Type

    No type

    Projects

    Status

    ✅ Done

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions