<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:TimesNewRomanPSMT;
panose-1:0 0 0 0 0 0 0 0 0 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Texto de globo Car";
margin:0cm;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.TextodegloboCar
{mso-style-name:"Texto de globo Car";
mso-style-priority:99;
mso-style-link:"Texto de globo";
font-family:"Tahoma","sans-serif";
mso-fareast-language:ES;}
span.EstiloCorreo20
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 3.0cm 70.85pt 3.0cm;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="ES" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Yes, you´re correct and the BRs should be clear with this, but at the moment, the root program requirements already says that a full audit is required
and then the TSPs that use ETSI standards shall make a full audit every year, but does not affect eIDAS nor ETSI. And yes, for changing the BRs, it needs to vote, but for what I think was the text to include was just to change the “old” TSs to include the
“new” ENs and for that there´s no need to vote I think.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal" style="line-height:9.75pt"><b><span lang="ES-TRAD" style="font-size:8.5pt;font-family:"Tahoma","sans-serif";color:black">Iñigo Barreira</span></b><span lang="ES-TRAD" style="font-size:8.5pt;font-family:"Tahoma","sans-serif";color:black"><br>
Responsable del Área técnica<br>
<a href="mailto:i-barreira@izenpe.eus">i-barreira@izenpe.eus</a> <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="ES-TRAD" style="font-size:8.5pt;font-family:"Tahoma","sans-serif";color:black">945067705</span><span lang="ES-TRAD" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="ES-TRAD" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:navy"><img border="0" width="589" height="99" id="Imagen_x0020_1" src="cid:image001.jpg@01D1C0C8.395F15A0" alt="Descripción: firma_email_Izenpe_eus"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="ES-TRAD" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal" style="line-height:9.75pt"><span style="font-size:7.5pt;font-family:"Tahoma","sans-serif";color:#888888;mso-fareast-language:ES-TRAD">ERNE! Baliteke mezu honen zatiren bat edo mezu osoa legez babestuta egotea. Mezua badu bere hartzailea.
Okerreko helbidera heldu bada (helbidea gaizki idatzi, transmisioak huts egin) eman abisu igorleari, korreo honi erantzuna. KONTUZ!</span><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#888888;mso-fareast-language:ES-TRAD"><br>
</span><span style="font-size:7.5pt;font-family:"Tahoma","sans-serif";color:#888888;mso-fareast-language:ES-TRAD">ATENCION! Este mensaje contiene informacion privilegiada o confidencial a la que solo tiene derecho a acceder el destinatario. Si usted lo recibe
por error le agradeceriamos que no hiciera uso de la informacion y que se pusiese en contacto con el remitente.</span><span style="font-family:"Calibri","sans-serif";color:navy;mso-fareast-language:ES-TRAD"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">De:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> Ryan Sleevi [mailto:sleevi@google.com]
<br>
<b>Enviado el:</b> martes, 07 de junio de 2016 14:00<br>
<b>Para:</b> Barreira Iglesias, Iñigo<br>
<b>CC:</b> Dean Coclin; tScheme Technical Manager; public@cabforum.org<br>
<b>Asunto:</b> Re: [cabfpub] RV: Text for ETSI Audit in CAB Forum baseline<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">Inigo,<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">The point is that the Baseline Requirements should make it clearer that conformance to the BRs requires an annual (full) audit, as discussed by Jody and I. The proposed change is to Section 8.2 of the BRs to make it explicit that the annual
surveillance audit, as required by eIDAS, is insufficient, and that a full audit to the relevant ETSI standards is necessary.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">This doesn't change eIDAS. It doesn't change the ETSI standards. But it does define, clearly, what conformance to the Baseline Requirements means. The Baseline Requirements already defines the audit period as 1 year (see Section 8.1) -
Dean was pointing out that if we want to make the Baseline Requirements' clearer, and reflecting what trust stores already expect, then we'd need a ballot to change the wording in 8.2 to provide that clarity.<o:p></o:p></p>
</div>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">On Thu, Jun 2, 2016 at 3:56 AM, Barreira Iglesias, Iñigo <<a href="mailto:i-barreira@izenpe.eus" target="_blank">i-barreira@izenpe.eus</a>> wrote:<o:p></o:p></p>
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Not sure what you mean. There´s no change nor in any ETSI standards nor in eIDAS, what
it was suggested was than instead of applying what eIDAS indicates of a maximum of 2 years with annual surveillance audits, applying full yearly audits for the CABF, so this is also according to eIDAS and then I think there´s nothing to vote here. The idea
is that the TSPs shall follow the browser requirements independently of using Webtrust or ETSI audits and these have to be aware by their CABs. And the ACABc is trying to make this resolution public.</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><o:p></o:p></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">De:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> Dean Coclin [mailto:<a href="mailto:Dean_Coclin@symantec.com" target="_blank">Dean_Coclin@symantec.com</a>]
<br>
<b>Enviado el:</b> domingo, 29 de mayo de 2016 2:33<br>
<b>Para:</b> Barreira Iglesias, Iñigo; tScheme Technical Manager; <a href="mailto:public@cabforum.org" target="_blank">
public@cabforum.org</a></span><o:p></o:p></p>
<div>
<div>
<p class="MsoNormal"><br>
<b>Asunto:</b> RE: [cabfpub] RV: Text for ETSI Audit in CAB Forum baseline<o:p></o:p></p>
</div>
</div>
</div>
</div>
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">As you know, changing this will require discussion and a ballot. Who will drive that?
Inigo?<br>
<br>
Thanks,<br>
Dean</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><o:p></o:p></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif"">From:</span></b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif"">
<a href="mailto:public-bounces@cabforum.org" target="_blank">public-bounces@cabforum.org</a> [<a href="mailto:public-bounces@cabforum.org" target="_blank">mailto:public-bounces@cabforum.org</a>]
<b>On Behalf Of </b>Barreira Iglesias, Iñigo<br>
<b>Sent:</b> Thursday, May 26, 2016 9:27 AM<br>
<b>To:</b> tScheme Technical Manager <<a href="mailto:richard.trevorah@tScheme.org" target="_blank">richard.trevorah@tScheme.org</a>>;
<a href="mailto:public@cabforum.org" target="_blank">public@cabforum.org</a><br>
<b>Subject:</b> Re: [cabfpub] RV: Text for ETSI Audit in CAB Forum baseline</span><o:p></o:p></p>
</div>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US"> </span><o:p></o:p></p>
<p><span lang="EN-US" style="font-family:"Calibri","sans-serif";color:black">Richard,</span><o:p></o:p></p>
<p><span lang="EN-US" style="font-family:"Calibri","sans-serif";color:black"> </span><o:p></o:p></p>
<p><span lang="EN-US" style="font-family:"Calibri","sans-serif";color:black">yesterday was agreed to have full audits yearly to meet browser requirements. So even eIDAS says the 2 years audit with anual surveillance audits, it was decided to change to yearly
full audits, and that´s what the text from Nick reflects.</span><o:p></o:p></p>
<p><span lang="EN-US" style="font-family:"Calibri","sans-serif";color:black">This is in the CABF documents affecting the SSL certificates at the moment.</span><o:p></o:p></p>
<div>
<div class="MsoNormal" align="center" style="text-align:center"><span lang="EN-US" style="font-family:"Calibri","sans-serif";color:#212121">
<hr size="2" width="98%" align="center">
</span></div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:black">De:</span></b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:black">
tScheme Technical Manager <<a href="mailto:richard.trevorah@tScheme.org" target="_blank">richard.trevorah@tScheme.org</a>><br>
<b>Enviado:</b> jueves, 26 de mayo de 2016 9:50<br>
<b>Para:</b> Barreira Iglesias, Iñigo; <a href="mailto:public@cabforum.org" target="_blank">
public@cabforum.org</a><br>
<b>Asunto:</b> RE: [cabfpub] RV: Text for ETSI Audit in CAB Forum baseline</span><span lang="EN-US" style="font-family:"Calibri","sans-serif";color:#212121">
</span><o:p></o:p></p>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-family:"Calibri","sans-serif";color:#212121"> </span><o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">My only comment on Nick’s proposal is on frequency.</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">In Mr Wanko’s presentation he has:</span><o:p></o:p></p>
<p><span lang="EN-US" style="font-size:11.0pt;color:#1F497D">“</span><b><span lang="EN-US" style="font-size:16.0pt;color:#505050">7.4.6 Audit Frequency
</span></b><o:p></o:p></p>
<p><span lang="EN-US" style="font-size:16.0pt;font-family:Wingdings;color:#C00000">§</span><i><span lang="EN-US" style="font-size:16.0pt">There shall be a period of no greater than
<b><span style="color:red">two years </span></b>for a full (re-)assessment audit unless otherwise required by the […] commercial scheme applying the present document.
</span></i><o:p></o:p></p>
<p><span lang="EN-US" style="font-size:16.0pt"> </span><o:p></o:p></p>
<p><b><span lang="EN-US" style="font-size:16.0pt;color:#505050">7.9 Surveillance </span>
</b><o:p></o:p></p>
<p><span lang="EN-US" style="font-size:16.0pt;font-family:Wingdings;color:#C00000">§</span><i><span lang="EN-US" style="font-size:16.0pt">[…] It is recommended that at least
<b><span style="color:red">one surveillance audit per year </span></b>is performed in between full (re-)assessment audits.
</span></i><span lang="EN-US" style="font-size:11.0pt;color:#1F497D">”</span><o:p></o:p></p>
<p><span lang="EN-US" style="font-size:11.0pt;color:#1F497D"> </span><o:p></o:p></p>
<p><span lang="EN-US" style="font-size:11.0pt;color:#1F497D">Which I think captures the eIDAS regulation rather than Nick’s proposal for a full audit annually, so I would change the final sentence to:</span><o:p></o:p></p>
<p><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">“</span><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif";color:#212121">Full audits against the ETSI standards shall be carried
out at least every two years and there should be at least one surveillance audit per year between full audits.
</span><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">”</span><o:p></o:p></p>
<p><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><o:p></o:p></p>
<p><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Regards</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Richard</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:10.0pt;color:black">------------------------------------<br>
Richard Trevorah<br>
Technical Manager<br>
tScheme Limited<br>
<br>
M: <a href="tel:%2B44%20%280%29%20781%20809%204728" target="_blank">+44 (0) 781 809 4728</a><br>
F: <a href="tel:%2B44%20%280%29%20870%20005%206311" target="_blank">+44 (0) 870 005 6311</a><br>
<br>
</span><span lang="EN-US" style="color:#1F497D"><a href="http://www.tscheme.org" target="_blank">http://www.tscheme.org</a><br>
</span><span lang="EN-US" style="color:black">------------------------------------<br>
<br>
The information in this message and, if present, any attachments are intended solely for the attention and use of the named addressee(s). The content of this e-mail and its attachments is confidential and may be legally privileged. Unless otherwise stated,
any use or disclosure is unauthorised and may be unlawful.<br>
<br>
If you are not the intended recipient, please delete the message and any attachments and notify the sender as soon as practicable</span><o:p></o:p></p>
<p><span lang="EN-US" style="font-family:"Calibri","sans-serif";color:#212121"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><o:p></o:p></p>
<div>
<div style="border:none;border-top:solid windowtext 1.0pt;padding:3.0pt 0cm 0cm 0cm;border-color:currentColor currentColor">
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:#212121">From:</span></b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:#212121">
<a href="mailto:public-bounces@cabforum.org" target="_blank">public-bounces@cabforum.org</a> [<a href="mailto:public-bounces@cabforum.org" target="_blank">mailto:public-bounces@cabforum.org</a>]
<b>On Behalf Of </b>Barreira Iglesias, Iñigo<br>
<b>Sent:</b> 26 May 2016 08:14<br>
<b>To:</b> <a href="mailto:public@cabforum.org" target="_blank">public@cabforum.org</a><br>
<b>Subject:</b> [cabfpub] RV: Text for ETSI Audit in CAB Forum baseline</span><o:p></o:p></p>
</div>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="color:#212121"> </span><o:p></o:p></p>
<div>
<div class="MsoNormal" align="center" style="text-align:center"><span lang="EN-US" style="font-family:"Calibri","sans-serif";color:#212121">
<hr size="2" width="98%" align="center">
</span></div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:black">De:</span></b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:black">
Inigo Barreira <<a href="mailto:inigo_barreira@hotmail.com" target="_blank">inigo_barreira@hotmail.com</a>><br>
<b>Enviado:</b> jueves, 26 de mayo de 2016 9:12<br>
<b>Para:</b> Barreira Iglesias, Iñigo<br>
<b>Asunto:</b> FW: Text for ETSI Audit in CAB Forum baseline</span><span lang="EN-US" style="font-family:"Calibri","sans-serif";color:#212121">
</span><o:p></o:p></p>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-family:"Calibri","sans-serif";color:#212121"> </span><o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-family:"Calibri","sans-serif";color:#212121"><br>
</span><o:p></o:p></p>
<div>
<div class="MsoNormal" align="center" style="text-align:center"><span lang="EN-US" style="font-family:"Calibri","sans-serif";color:#212121">
<hr size="2" width="100%" align="center">
</span></div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:12.0pt"><span lang="EN-US" style="font-family:"Calibri","sans-serif";color:#212121">From:
<a href="mailto:nick.pope@thales-esecurity.com" target="_blank">nick.pope@thales-esecurity.com</a><br>
To: <a href="mailto:public@cabforum.org" target="_blank">public@cabforum.org</a><br>
CC: <a href="mailto:c.wanko@tuvit.de" target="_blank">c.wanko@tuvit.de</a>; <a href="mailto:atrotin@exchange.lsti.fr" target="_blank">
atrotin@exchange.lsti.fr</a>; <a href="mailto:pbouchet@exchange.lsti.fr" target="_blank">
pbouchet@exchange.lsti.fr</a>; <a href="mailto:inigo_barreira@hotmail.com" target="_blank">
inigo_barreira@hotmail.com</a><br>
Date: Wed, 25 May 2016 16:13:19 +0100<br>
Subject: Text for ETSI Audit in CAB Forum baseline</span><o:p></o:p></p>
<div>
<p><span lang="EN-US" style="font-family:"Calibri","sans-serif";color:#0070C0">All,</span><o:p></o:p></p>
<p><span lang="EN-US" style="font-family:"Calibri","sans-serif";color:#0070C0"> </span><o:p></o:p></p>
<p><span lang="EN-US" style="font-family:"Calibri","sans-serif";color:#0070C0">Following on from my presentation today on the latest ETSI standards and that of the ACAB’c I would suggest that the CABF baseline requirements section 8.2 item on audits against
ETSI standards is replaced with the following. I ask my EU colleagues to come with in any further suggestions.</span><o:p></o:p></p>
<p><span lang="EN-US" style="font-family:"Calibri","sans-serif";color:#0070C0"> </span><o:p></o:p></p>
<p><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif";color:#212121">4. For audits conducted in accordance with any one of the ETSI standards, conformity assessment bodies accredited in accordance with ISO 17065 applying the
requirements specified in EN 319 403. Full audits against the ETSI standards shall be carried out annually.
</span><o:p></o:p></p>
<p><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif";color:#212121"> </span><o:p></o:p></p>
<p><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif";color:#212121">Elsewhere replace reference to TS 102 042 with EN 319 411-1.</span><o:p></o:p></p>
<p><span lang="EN-US" style="font-family:"Calibri","sans-serif";color:#212121"> </span><o:p></o:p></p>
<p><span lang="EN-US" style="font-family:"Calibri","sans-serif";color:#0070C0">Thanks for the interesting discussions today.</span><o:p></o:p></p>
<p><span lang="EN-US" style="font-family:"Calibri","sans-serif";color:#0070C0"> </span><o:p></o:p></p>
<p><span lang="EN-US" style="font-family:"Calibri","sans-serif";color:#0070C0">Nick</span><o:p></o:p></p>
<p><span lang="EN-US" style="font-family:"Calibri","sans-serif";color:#212121"> </span><o:p></o:p></p>
<p><span lang="EN-US" style="font-size:8.0pt;font-family:"Arial","sans-serif";color:#1F497D">Nick Pope CITP, CISSP<br>
<b>THALES</b> </span><o:p></o:p></p>
<p><span lang="EN-US" style="font-size:8.0pt;font-family:"Arial","sans-serif";color:#1F497D">Principal Consultant, Advanced Solutions Group EMEA</span><o:p></o:p></p>
<p><span lang="EN-US" style="font-size:8.0pt;font-family:"Arial","sans-serif";color:#1F497D">Vice chair – ETSI Technical Committee on Electronic Signatures and Infrastructures</span><o:p></o:p></p>
<p><span lang="EN-US" style="font-size:8.0pt;font-family:"Arial","sans-serif";color:#1F497D"><br>
Meadow View House, Long Crendon, AYLESBURY, HP18 9EQ, UK<br>
</span><span lang="EN-US" style="font-size:8.0pt;font-family:"Calibri","sans-serif";color:#212121"><a href="http://www.thales-esecurity.com/" target="_blank"><span style="font-family:"Arial","sans-serif";color:#1F497D">www.thales-esecurity.com</span></a></span><o:p></o:p></p>
<p><span lang="EN-US" style="font-size:8.0pt;font-family:"Arial","sans-serif";color:#1F497D">Mob:
<a href="tel:%2B44%20%280%29%207880%20787940" target="_blank">+44 (0) 7880 787940</a>, Tel:
<a href="tel:%2B44%C2%A0%280%29%C2%A01844%20201800" target="_blank">+44 (0) 1844 201800</a> (General).
</span><o:p></o:p></p>
<p><span lang="EN-US" style="font-size:8.0pt;font-family:"Arial","sans-serif";color:#1F497D">email:
</span><span lang="EN-US" style="font-size:8.0pt;font-family:"Calibri","sans-serif";color:#212121"><a href="mailto:Nick.Pope@thales-esecurity.com" target="_blank"><span style="font-family:"Arial","sans-serif"">Nick.Pope@thales-esecurity.com</span></a></span><o:p></o:p></p>
<p><span lang="EN-US" style="font-size:8.0pt;font-family:"Calibri","sans-serif";color:#212121"> </span><o:p></o:p></p>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-family:"Calibri","sans-serif";color:#212121"> </span><o:p></o:p></p>
<div class="MsoNormal" align="center" style="text-align:center"><span lang="EN-US" style="font-family:"Calibri","sans-serif";color:#212121">
<hr size="2" width="100%" align="center">
</span></div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:7.5pt;font-family:"Arial","sans-serif";color:gray">Consider the environment before printing this mail.<br>
<br>
Thales UK Limited is incorporated in England and Wales with company registration number 00868273. Its registered office is located at 2 Dashwood Lang Road, The Bourne Business Park, Addlestone, Nr. Weybridge, Surrey KT15 2NX.<br>
<br>
The information contained in this e-mail is confidential. It may also be privileged. It is intended only for the stated addressee(s) and access to it by any other person is unauthorised. If you are not an addressee or the intended addressee, you must not disclose,
copy, circulate or in any other way use or rely on the information contained in this e-mail. Such unauthorised use may be unlawful. If you have received this e-mail in error, please inform us immediately on
<a href="tel:%2B44%20%280%291844%20201800" target="_blank">+44 (0)1844 201800</a> and delete it and all copies from your system. Commercial matters detailed or referred to in this e-mail are subject to a written contract signed for and on behalf of Thales UK
Limited.</span><o:p></o:p></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><br>
_______________________________________________<br>
Public mailing list<br>
<a href="mailto:Public@cabforum.org">Public@cabforum.org</a><br>
<a href="https://cabforum.org/mailman/listinfo/public" target="_blank">https://cabforum.org/mailman/listinfo/public</a><o:p></o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</body>
</html>