...
- Ken walked the group through the UK DCMS questions and draft responses:
"Q5) Do the certification documents shared so far make sense? Do you have any questions on the process?"
"Q6) We are working on the principle that organisations will be able to be certified:
Directly against the trust framework, with possible ‘add-on’ certifications or signing of t&cs to join particular schemes
Certified against a set of requirements set by the scheme operator (which includes the trust framework requirements), and the scheme operator will be certified against the trust framework
In both of these scenarios we are looking at certification being the responsibility of certification bodies that sit under UKAS. Does this seem appropriate to you?"
Kantara Response: Kantara would strongly recommend that services, rather than organizations, be certified. This would accommodate the situation where one service offered by the organization can be certified while another, that does not meet the requirements, will not be certified. Additionally, it would avoid the situation of relying parties believing that all of an organization’s services have been certified when only one of them has been certified. Kantara would also recommend that a registry of certified services, including details of what the service provides, be maintained.
Kantara would suggest that, in order to allow the scenario where a service has been certified by another recognized certification body that is not under the DCMS, that it be accepted. In this situation, service providers will not have to undergo, and incur the cost of, multiple certifications. Kantara would suggest that DCMS clarify that certification bodies are not organizationally “under” the DCMS.
"Q7) Are there schemes being developed that you would consider joining in the future?"
Kantara Response: Kantara suggests that internationally recognized schemes be accommodated.
"Q8) Is it more attractive to certify directly under the Trust Framework?"
"Q9) If schemes do have certification available, would you have confidence that it creates an ‘even playing field’?"
Kantara Response: Yes, assuming that certifications are granted by certification bodies that have been accredited by IAF. There is also an assumption that the requirements are equivalent.
...