D-TRUST-Root PKI Certification Practice Statement

D-TRUST-Root-PKI Certification Practice Statement
informational security. The CSP thereby complies with the requirements of
section 12.1 [GL-BRO].
5.2.2 Principle of Multiple Administrators
Highly critical procedures can only be performed with the help of at least two attending
administrators. This necessity is implemented through technical and organizational
provisions, such as restricted access rights and strict knowledge division.
5.2.3 Role Identification and Authentication
The role concept is enforced by technical and organizational provisions, such as limited
access privileges, the targeted inquiry of partial passwords etc. The realizing
administrator has to authenticate himself successfully before gaining access to critical
applications. Any action can be retraced through event-logs and tied to the administrating
employee. Employees are accountable for their actions.
5.2.4 Role-Exclusion
The role-concept arranges for certain role-exclusions that keep a single person from
creating and publishing a certificate himself. No single person has the authority to
undertake all necessary steps to create a certificate.
5.3 Employees
The CSP complies with the personnel requirements set out by [SigG] and [SigV] which it
details in the security concept [SiKo-DTR].
5.3.1 Requirements of Qualification, Expertise and Reliability
The CSP ensures that the personnel employed in the Certification Service possess the
necessary qualification, expertise and skill required by their functions.
5.3.2 Security Validation
The CSP complies with the requirements of § 5 (5) SigG. The details are described in the
security concept [SiKo-DTR]. Among other provisions, the employees must periodically
present valid and unblemished criminal records.
5.3.3 Training
The CSP trains people working in the Certification Service.
5.3.4 Periodicity of Training and Instructions
The CSP trains people working in the Certification Service upon the initiation of their
duties and when necessary.
Page 35 of 53