<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from rtf -->
<style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style>
</head>
<body>
<font face="Calibri" size="2"><span style="font-size:11pt;">
<div>In section 17.8 of baseline 1.1<a name="_Toc310247301"></a> “Regular Quality Assessment Self Audits” it states</div>
<div> </div>
<div>“During the period in which the CA issues Certificates, the CA SHALL monitor adherence to its Certificate Policy, Certification Practice Statement and these Requirements and strictly control its service quality by performing self-audits on at least a quarterly
basis against a randomly selected sample of the greater of one certificate or at least three percent of the Certificates issued by it during the period commencing immediately after the previous self-audit sample was taken ……..”</div>
<div> </div>
<div>Just to clarify for our audits - Is this a sample of all certificates issued by the CA ( SSL, EV, OV, DV) or are there any exclusions from the population. </div>
<div> </div>
<div>Thanks</div>
<div> </div>
<div>Don</div>
<div> </div>
<div> </div>
<div><font face="Arial" size="2" color="#000066"><span style="font-size:10pt;"><b>Donald E. Sheehy, CPA, </b><font color="navy"><b>CA·CISA, CRISC, CIPP/C</b></font></span></font></div>
<div><font face="Verdana" size="1" color="#000066"><span style="font-size:8pt;">Partner | Enterprise Risk </span></font></div>
<div><font face="Verdana" size="1" color="#000066"><span style="font-size:8pt;">Deloitte </span></font></div>
<div><font face="Arial" size="1" color="#004994"><span style="font-size:8pt;">30 Wellington St Wt, PO Box 400, Stn Commerce Crt, Toronto, ON M5L 1B1</span></font></div>
<div><font face="Arial" size="1" color="#004994"><span style="font-size:8pt;">Direct: 416-601-5863 | Main: 416-601-6500</span></font></div>
<div><font face="Arial" size="1" color="#004994"><span style="font-size:8pt;">Fax: 416-601-6400 | Mobile: 416-301-2350</span></font></div>
<div><a href="mailto:name@deloitte.ca"><font face="Arial" size="1" color="blue"><span style="font-size:8pt;"><u>dosheehy@deloitte.ca</u></span></font></a><font face="Arial" size="1" color="#004994"><span style="font-size:8pt;"> | </span></font><a href="http://www.deloitte.ca/"><font face="Arial" size="1" color="blue"><span style="font-size:8pt;"><u>www.deloitte.ca</u></span></font></a></div>
<div><font color="#004994"> </font></div>
<div><font face="Arial" size="1" color="#00A8E6"><span style="font-size:8pt;">Deloitte is proud to be an Official Supplier </span></font></div>
<div><font face="Arial" size="1" color="#00A8E6"><span style="font-size:8pt;">of the Canadian Olympic team </span></font></div>
<div> </div>
<div><font face="Arial" size="1" color="#92D400"><span style="font-size:7.5pt;">Please consider the environment before printing. </span></font></div>
<div> </div>
<div> </div>
<div> </div>
</span></font>
</body>
</html>
<HTML><BODY><P><hr size=1></P>
<P><STRONG>
</STRONG></P>
Confidentiality Warning: This message and any attachments are intended only for the use of the intended recipient(s), are confidential, and may be privileged. If you are not the intended recipient, you are hereby notified that any review, retransmission, conversion to hard copy, copying, circulation or other use of this message and any attachments is strictly prohibited. If you are not the intended recipient, please notify the sender immediately by return e-mail, and delete this message and any attachments from your system. Thank you. <BR>
Information confidentielle: Le présent message, ainsi que tout fichier qui y est joint, est envoyé à l'intention exclusive de son ou de ses destinataires; il est de nature confidentielle et peut constituer une information privilégiée. Nous avertissons toute personne autre que le destinataire prévu que tout examen, réacheminement, impression, copie, distribution ou autre utilisation de ce message et de tout fichier qui y est joint est strictement interdit. Si vous n'êtes pas le destinataire prévu, veuillez en aviser immédiatement l'expéditeur par retour de courriel et supprimer ce message et tout document joint de votre système.
Merci.
</STRONG></P></BODY></HTML>