Business Practices: The paper-based identity-proofing approach is based on collecting a "Subscriber Agreement" from the registrant under CROMERR section 3.2000(b)(5)(vii)(C). A subscriber agreement is a CROMERR electronic signature agreement (ESA) executed on paper with the registrant's handwritten signature. The procedure is the following: When the registration process presents the registrant with the two identity-proofing options, s/he chooses the option. <Partner System> generates the subscriber agreement form, for the registrant to download. A subscriber agreement form contains a unique cryptographic transaction ID which <Partner System> logs to associate the subscriber agreement form with the registrant's UserID; it also contains information identifying the registrant and the organization affiliation, including the registrant's email address and his/her organization name and address. Registrant is placed in a "pending" state until the subscriber agreement is returned to <Partner Help Desk> and verified for completeness. The registrant signs the subscriber agreement with a handwritten signature. Returns: Registrant returns subscriber agreement via USPS to the <Partner Help Desk>. Processing: <Partner Help Desk> receives the subscriber agreement, and then the <Partner Help Desk> performs the following steps: Verifies that the subscriber agreement has been filled out and signed; Validates the information on the subscriber agreement by making telephone contact with the registrant's authorizing official/employer to confirm business employment and submitter authorization; Activates the registrant's account, and notifies the registrant via email. (Registrant is also notified by email in case the subscriber agreement is deficient and the account is not activated.) Maintenance: <Partner Help Desk> receives the subscriber agreement: Stores the received subscriber agreement in a filing system, in a badge accessible room; Retains subscriber agreements for all signing credentials for a minimum of five years after signature device deactivation.
Business Practices: The paper-based identity-proofing approach is based on collecting a "Subscriber Agreement" from the registrant under CROMERR section 3.2000(b)(5)(vii)(C). A subscriber agreement is a CROMERR electronic signature agreement (ESA) executed on paper with the registrant's handwritten signature. The procedure is the following: When the registration process presents the registrant with the two identity-proofing options, s/he chooses the option. <Partner System> generates the subscriber agreement form, for the registrant to download. A subscriber agreement form contains a unique cryptographic transaction ID which <Partner System> logs to associate the subscriber agreement form with the registrant's UserID; it also contains information identifying the registrant and the organization affiliation, including the registrant's email address and his/her organization name and address. Registrant is placed in a "pending" state until the subscriber agreement is returned to <Partner Help Desk> and verified for completeness. The registrant signs the subscriber agreement with a handwritten signature. Returns: Registrant returns subscriber agreement via USPS to the <Partner Help Desk>. Processing: <Partner Help Desk> receives the subscriber agreement, and then the <Partner Help Desk> performs the following steps: Verifies that the subscriber agreement has been filled out and signed; Validates the information on the subscriber agreement by making telephone contact with the registrant's authorizing official/employer to confirm business employment and submitter authorization; Activates the registrant's account, and notifies the registrant via email. (Registrant is also notified by email in case the subscriber agreement is deficient and the account is not activated.) Maintenance: <Partner Help Desk> receives the subscriber agreement: Stores the received subscriber agreement in a filing system, in a badge accessible room; Retains subscriber agreements for all signing credentials for a minimum of five years after signature device deactivation.
CROMERR-Shared-Services-Checklist-02072014.docx