With the adoption of the eIDAS Regulation, the European Union legis­lation has redefined the require­ments for qualified electronic signa­tures, the digital replacement of handwritten signa­tures. In addition, the possi­bility of a qualified electronic seal has been created with which a company or organ­i­sation (legal entity) can prove the authen­ticity of sealed data to third parties. Services (trust services) can be estab­lished around the creation and use of qualified signa­tures and seals, which can be granted the status “qualified” after a successful conformity assessment.

The conformity assessment for you as a Trust Service Provider is carried out in two steps: a documen­tation check and an on-site audit in which it is verified if the documented security mecha­nisms have also been correctly imple­mented. A more detailed description of the procedure and the security require­ments to be applied from legis­lation and relevant standards can be found in the associated certi­fi­cation programme. The conformity assessment is carried out by SRC, the status is assigned by the respon­sible super­visory body. In Germany, these are the BSI (qualified certifi­cates for websites) and the Federal Network Agency (all other services).

In order to carry out such an assessment, SRC as the testing body must also prove its expertise and indepen­dence in an accred­i­tation procedure. National conformity assessment bodies are accredited by the German Accred­i­tation Body (DAkkS).

We are pleased to offer you the oppor­tunity to draw on the expertise and experience of our independent security experts for the conformity assessment of your trust service.
Further infor­mation can be found on src-zert.de/en/.