With the introduction of the eIDAS Regulation, European Union legislation has redefined the requirements for the qualified electronic signature, the digital replacement for the handwritten signature. In addition, the possibility of a qualified electronic seal was created, with which the authenticity of sealed data by a company or organisation (legal entity) can be proven to third parties. Services (trust services) can be established around the generation and use of qualified signatures and seals, which can be awarded the status “qualified” after a successful conformity assessment.
The implementation of a conformity assessment for you as a trust service provider takes place in two steps: an examination of the documentation and an on-site examination (audit) in which it is verified whether the documented security mechanisms have also been implemented correctly. A more detailed description of the procedure and the applicable safety requirements from legislation and relevant standards can be found in the associated certification scheme. The conformity assessment is carried out by SRC and the status is awarded by the competent supervisory body. In Germany, these are the BSI (qualified certificates for websites) and the Federal Network Agency (all other services).
In order to carry out such an assessment, the SRC as an assessing body must also prove its expertise and independence in an accreditation procedure. National conformity assessment bodies are accredited by the German Accreditation Body (DAkkS).
We are happy to offer you the opportunity to draw on the expertise and experience of our independent security experts for the conformity assessment of your trust service.
For more information, please visit www.src-zert.de.
