External Audit ICP-Brasil

We are registered and authorized with ITI to carry out an independent external audit in the Brazilian Public Key Infrastructure in order to assess the degree of compliance and adherence to the Resolutions in force at ICP-Brasil, our work aims to audit the IT environment Certification Authorities and Registration Authorities in all aspects related to information security, observing the following topics:

a) Operating Environment

i. Security of People;

ii. Physical Security;

iii. Logical Security;

iv. Network Security;

v. Information Security;

I saw. Entity Key Management.

b) Certificate Life Cycle

i. Request;

ii. Validation;

iii. Issuance;

iv. Repeal.

c) Other Controls.