• For Assurers (internal RAs), AP requires 100 Assurance Points which amounts to 2 minimum and probably 3 or more checks by other Assurers or equivalent.
  • For RAPs, language states: "An RA conducting assurances remotely using TTPs: ... MUST be satisfied as to the identity and competency of the TTP in identification procedures, as though they were to be conducting the assurance themselves." Therefore, RAP as written above would be a PASS.
  • For RVP, no such language is included. Therefore, RVP as written above would be a FAIL.
  • Now all Assurers were done under the new programme. There is a requirement to identify and re-verify the Assurers using more modern methods. E.g., some Assurers were created via Super-Assurance programme (now dead) and thus may not have been more than once.