Virginia Regulatory Town Hall
Agency
Identity Management Standards Advisory Council
 
Board
Identity Management Standards Advisory Council
 
Next Comment     Back to List of Comments
10/12/17  9:14 am
Commenter: Timothy Reiniger, Reiniger LLC

Points for Clarification
 

Thank you for this excellent document. Three points for clarification:

1. Is the reference to "Certification Authorities" (starting on page 6) intended to encompass/include "Trust Framework Providers" as referenced in NIST/IDESG/and other global identitiy forums?  

2. This statement appears on page 10 - "IMSAC shall maintain and publish on the VITA website a list of eligible certification authorities." How does a Certification Authority qualify/be deemed eligible to be listed on the VITA website? Will the Certification Authoriry first need to be on the approved US federal ICAM/FICAM lists (or the equivalent lists in the European Union or elsewhere)?

3. On page 11, appears the statement that a Certification Authority "must be a legal entity with the requisite standing to perform certifications of compliance of identity trust framework operators within the Commonwealth of Virginia." Is the reference to "standing" intended to mean 'legal standing" such as to require the Certification Authority to make certain corporate filings/status along with the appointment of a corporate agent in Virginia?

CommentID: 62928