CAcert Management Assertion

CAcert Inc. makes the following assertions based the following:

CAcert is an Open Organisation. CAcert Inc. operates Certificate Authority services for and on behalf of registered members (Members) within CAcert’s community at large (Community). All policies and practices for this open CA service are disclosed except where expressly mandated by security or privacy concerns (i.e.: passwords, etc...) and documented.

CAcert is running a certificate authority (CA) based on and conforming to the CAcert principles.

In order to achieve this CAcert does the following things:

• Assurance of Individuals (Web of Trust) according to the Assurance Policy (AP)
• Assurance of Organisations in accordance with the Organisation Assurance Policy (OAP)
• Training, Testing & Education of assurers using CATS
• Maintaining Secure Systems according to the Security Policy and the Security Manual (SM)
• Maintaining Member Privacy according to the CAcert Community Agreement (CCA)
• Issuance of Certificates in accordance with the Certificate Practice Statement (CPS)
• Limiting Liability of members and resolving disputes using Dispute Resolution Policy (DRP). In order to limit liability of members and resolve any disputes with CAcert and its members as well as provide third parties with a means of recourse a forum of arbitration is established.
• Controlled Management of Changes as defined by the Policy on Policy and the Configuration Control Specification

To ensure compliance with these policies and this statement CAcert Inc. is committed to an audit process according to the David Ross Criteria (DRC) which intend to maintain the spirit and improve upon criteria such as Web-Trust® and others.

CAcert Inc. Committee (Board)
May 19, 2009.

For more information on Open Organisations check out /http://open.coop/