message are excluded) B, M (ALL The approval or rejection POLICIES) & of a certificate status PIV-I H change request R, B, M (ALL Appointment of an POLICIES) & individual to a Trusted PIV-I H Role B, M (ALL Destruction of POLICIES) & cryptographic modules PIV-I H B, M (ALL All certificate POLICIES) & compromise notifications PIV-I H B, M (ALL Remedial action taken as POLICIES) & a result of violations of PIV-I H physical security R, B, M (ALL Violations of Certificate POLICIES) & Policy PIV-I H R, B, M (ALL Violations of Certification POLICIES) & Practice Statement PIV-I H An Entity is responsible to properly administer their environment. Administration requirements affect personnel, procedures and technology. Controls over access, documented processes and alternative methods to retain records are to be implemented. Table No. CP Section Requirement 7.8 5.5.3 No unauthorized user shall be permitted to write to or delete the archive. Applicant: If the original media cannot retain the data for the required period, a mechanism to 7.9 5.5.3 periodically transfer the archived data to new media shall be defined by the archive site. Alternatively, an Entity may retain data using whatever procedures have been approved by for that category of documents. Applications required to process the archive data shall also be maintained for a period determined by the Entity for the Entity CA. Applicant: 7.10 5.5.4 If a cross-certified entity chooses to back up its archive records, the CPS or a
message are excluded) B, M (ALL POLICIES) & PIV-I H The approval or rejection of a certificate status change request R, B, M (ALL POLICIES) & PIV-I H Appointment of an individual to a Trusted Role B, M (ALL POLICIES) & PIV-I H Destruction of cryptographic modules B, M (ALL POLICIES) & PIV-I H All certificate compromise notifications B, M (ALL POLICIES) & PIV-I H Remedial action taken as a result of violations of physical security R, B, M (ALL POLICIES) & PIV-I H Violations of Certificate Policy R, B, M (ALL POLICIES) & PIV-I H Violations of Certification Practice Statement An Entity is responsible to properly administer their environment. Administration requirements affect personnel, procedures and technology. Controls over access, documented processes and alternative methods to retain records are to be implemented. Table No. CP Section Requirement 7.8 5.5.3 No unauthorized user shall be permitted to write to or delete the archive. Applicant: 7.9 5.5.3 If the original media cannot retain the data for the required period, a mechanism to periodically transfer the archived data to new media shall be defined by the archive site. Alternatively, an Entity may retain data using whatever procedures have been approved by for that category of documents. Applications required to process the archive data shall also be maintained for a period determined by the Entity for the Entity CA. Applicant: 7.10 5.5.4 If a cross-certified entity chooses to back up its archive records, the CPS or a
fpki-certification-applicant-reqs.docx