Consider adding language in a new MRSP §3.1.5 that requires CAs to annually obtain Detailed Controls Reports (DCRs) (e.g., WebTrust DCR or equivalent ETSI documentation), which Mozilla may request when needed to clarify audit scope, control design, operational effectiveness, etc.
Consider adding language in a new MRSP §3.1.5 that requires CAs to annually obtain Detailed Controls Reports (DCRs) (e.g., WebTrust DCR or equivalent ETSI documentation), which Mozilla may request when needed to clarify audit scope, control design, operational effectiveness, etc.