CPS refers all root management to Security Policy. (2) SP9.2.4 "Revocation" refers to SM because Internet PKI does not include nor admit the concept of a root revocation. This is a bug in PKI. An approximate plan has been developed jointly with Mozilla, more akin to a disaster recovery process. This plan is considered reasonable. (5) SP9.2.1 does not comment on notification, nor SM. WT20 speaks to distribution. WT33 speaks to user cert revocation.