Kathleen - I agree with the others who have requested you define the meaning of "root cert transfer" first. Because if it is physical relocation, but the management remains the same and the CA/PKI is under annual audit this should be part of what is covered by the next audit.
This is very different from a management change due to new ownership, but the same technical management of a CA continues vs other types of transfer. Thanks, Wendy Wendy Brown Protiviti Government Services 703-299-4705 (office) 703-965-2990 (cell) [email protected] NOTICE: Protiviti is a global consulting and internal audit firm composed of experts specializing in risk and advisory services. Protiviti is not licensed or registered as a public accounting firm and does not issue opinions on financial statements or offer attestation services. This electronic mail message is intended exclusively for the individual or entity to which it is addressed. This message, together with any attachment, may contain confidential and privileged information. Any views, opinions or conclusions expressed in this message are those of the individual sender and do not necessarily reflect the views of Protiviti Inc. or its affiliates. Any unauthorized review, use, printing, copying, retention, disclosure or distribution is strictly prohibited. If you have received this message in error, please immediately advise the sender by reply email message to the sender and delete all copies of this message. Thank you. _______________________________________________ dev-security-policy mailing list [email protected] https://lists.mozilla.org/listinfo/dev-security-policy
