...
- It was pointed out that services are certified not organizations.
- It was clarified that Kantara's model does not oblige to use suggests to integrate a service with a certified SP, but it does not oblige it is suggested. Moreover, Kantara's CO_SAC (CO#0320 and CO#0330) addresses the interaction with external services and the risk mitigation measure includes contract arrangements to enforce the implementation of the policies and procedures.
...