Raytheon Company Public Key Infrastructure (PKI) Certificate Policy

� Verifying identity, pursuant to Section 3.2; and
� Security communicating subscriber information to the RA.
5.2.2 Number of Persons Required per Task
Two or more persons shall be required to perform the following tasks:
� CA key generation;
� CA signing key activation;
� CA private key backup.
Where multiparty control is required, at least one of the participants shall be an Administrator.
All participants shall serve in a trusted role as defined in Section 5.2.1.
Multiparty control shall not be achieved using personnel that serve in the Audit Administrator
Role.
All roles are recommended to have multiple persons in order to support continuity of operations.
5.2.3 Identification and Authentication for Each Role
An individual shall identify and authenticate him/herself before being permitted to perform any
actions set forth above for that role or identity.
5.2.4 Roles Requiring Separation of Duties
Role separation, when required as set forth below, may be enforced either by the CA
equipment, or procedurally, or by both means.
Individual CA personnel shall be specifically designated to the four roles defined in Section 5.2.1
above. Individuals may assume more than one role, except:
� Individuals who assume an Officer role may not assume an Administrator or Audit
Administrator role;
� Individuals who assume an Audit Administrator shall not assume any other role on the
CA; and
� Under no circumstances shall any of the four roles perform its own compliance auditor
function.
No individual shall be assigned more than one identity.
5.3 Personnel Controls
5.3.1 Qualifications, Experience, and Clearance Requirements
A group of individuals responsible and accountable for the operation of each CA and CSA shall
be identified. The trusted roles of these individuals per Section 5.2.1 shall be identified.
All persons filling trusted roles shall be selected on the basis of loyalty, trustworthiness, and
integrity, and shall be subject to background investigation. Personnel appointed to trusted roles
(including CA trusted roles, CSA trusted roles, Trusted Agent, and RA role) shall:
� Have successfully completed an appropriate training program;
� Have demonstrated the ability to perform their duties;
46 7/25/2011