<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p>Hello, <br>
asked the ETSI ESI and ACAB´c Collegues to give additional input
on the definitions of "Audit Period" and "Audit Frequency" as
defined in European Norms.<br>
</p>
<p>Best regards and enjoy the week.<br>
</p>
<p>Arno<br>
</p>
<p><br>
</p>
<p><a class="moz-txt-link-freetext" href="http://www.european-accreditation.org/information/etsistandard-en-319-403-published-to-provide-requirements-for-conformity-assessmentbodies-assessing-trust-service-providers-tsps">http://www.european-accreditation.org/information/etsistandard-en-319-403-published-to-provide-requirements-for-conformity-assessmentbodies-assessing-trust-service-providers-tsps</a><br>
</p>
<br>
<div class="moz-cite-prefix">Am 23.02.2017 um 21:06 schrieb Kirk
Hall via Public:<br>
</div>
<blockquote
cite="mid:94e6ff4e09034ae8aed018db109ecd68@PMSPEX04.corporate.datacard.com"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Garamond;
panose-1:2 2 4 4 3 3 1 1 8 3;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{mso-style-priority:99;
mso-style-link:"Plain Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.PlainTextChar
{mso-style-name:"Plain Text Char";
mso-style-priority:99;
mso-style-link:"Plain Text";
font-family:"Calibri",sans-serif;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoPlainText">Here is the “core” WT language in a
practitioner’s report:<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoNormal"
style="margin-left:.5in;text-autospace:none"><span
style="font-family:"Garamond",serif">We have
examined the assertion by the management of [name of CA]
that in providing its Certification Authority (CA) services
during the period from April 1, 2015 through March 31, 2016,
[CA] has: [done various things for its roots] based on the
Trust Service Principles and Criteria for Certification
Authorities Version 2.0. ***<o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span
style="font-family:"Garamond",serif"><o:p> </o:p></span></p>
<p class="MsoNormal"
style="margin-left:.5in;text-autospace:none"><span
style="font-family:"Garamond",serif">In our
opinion, for the period April 1, 2015 through March 31,
2016, [CA’s] management’s assertion, as set forth in the
first paragraph, is fairly stated, in all material respects,
based on the AICPA/CICA Trust Service Principles and
Criteria for Certification Authorities Version 2.0.<o:p></o:p></span></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">How about changing "the period of CA
operations a Qualified Auditor
<u>considers</u> ***” to “examines” or “reports on” or
“covers”?<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">Maybe we ask Jeff Ward to choose exactly
the right language? Otherwise, we support and will
co-endorse. Are there other minor changes to the BRs (and
EVGL) to make in this same ballot?<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">-----Original Message-----<br>
From: Public [<a class="moz-txt-link-freetext" href="mailto:public-bounces@cabforum.org">mailto:public-bounces@cabforum.org</a>] On Behalf Of
Gervase Markham via Public<br>
Sent: Thursday, February 23, 2017 11:51 AM<br>
To: CABFPub <a class="moz-txt-link-rfc2396E" href="mailto:public@cabforum.org"><public@cabforum.org></a><br>
Cc: Gervase Markham <a class="moz-txt-link-rfc2396E" href="mailto:gerv@mozilla.org"><gerv@mozilla.org></a><br>
Subject: [cabfpub] Ballot idea: Define "Audit Period"</p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">The term "audit period" is used in the
BRs but not defined, and Kathleen tells me she keeps running
into CAs who don't understand it, often confusing it with the
period of time the auditor is on the premises.<o:p></o:p></p>
<p class="MsoPlainText">Would anyone be opposed to a ballot to
add a definition of Audit Period along the following lines?<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">Audit Period: the period of CA
operations a Qualified Auditor considers when assessing the
work of a CA in order to write an Audit Report. This is not
the same as the (much shorter) period of time during which the
auditor is carrying out the audit. Audit Periods MUST NOT
exceed 1 year in duration, and Audit Periods for successive
audits of a particular type MUST be continuous.<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">(The latter sentence is added for
clarity, and repeats something said in section 8.1.)<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">The ballot would also replace "audit
period" with "Audit Period" throughout.<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">Gerv<o:p></o:p></p>
<p class="MsoPlainText">_______________________________________________<o:p></o:p></p>
<p class="MsoPlainText">Public mailing list<o:p></o:p></p>
<p class="MsoPlainText"><a moz-do-not-send="true"
href="mailto:Public@cabforum.org"><span
style="color:windowtext;text-decoration:none">Public@cabforum.org</span></a><o:p></o:p></p>
<p class="MsoPlainText"><a moz-do-not-send="true"
href="https://cabforum.org/mailman/listinfo/public"><span
style="color:windowtext;text-decoration:none">https://cabforum.org/mailman/listinfo/public</span></a><o:p></o:p></p>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Public mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Public@cabforum.org">Public@cabforum.org</a>
<a class="moz-txt-link-freetext" href="https://cabforum.org/mailman/listinfo/public">https://cabforum.org/mailman/listinfo/public</a>
</pre>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Arno Fiedler
Nimbus Technologieberatung GmbH
Reichensteiner Weg 17
14195 Berlin
Mobil: 0049-(0)172-3053272
Fax: 0049-(0)30-89745-777
E-Mail: <a class="moz-txt-link-abbreviated" href="mailto:arno.fiedler@nimbus-berlin.com">arno.fiedler@nimbus-berlin.com</a>
Web: <a class="moz-txt-link-abbreviated" href="http://www.nimbus-berlin.com">www.nimbus-berlin.com</a>
Geschäftsführer: Arno Fiedler
USt-IdNr. : DE 203 269 920
D-U-N-S® Nr. 50-730-8117
HandelsregisterNr:HRB 109409 B</pre>
</body>
</html>