Purpose: To outline a high-level guideline for applying for accreditation with the SAAA by authentication products / services providers

Background

The SAAA developed a high-level guideline and a diagram which is published on to SAAA website as a brief guide for applicants to follow when making an application for accreditation. It is important for the applicant to understand that when they submit an application to the SAAA, that application is as a result of an audit from the Panel of Auditors, the panel is appointed by the SAAA. The applicant choses an auditor of choice from the Panel.

The application process is depicted on Figure 1, and is outlined in detail below.

Application Process

1. The DCDT appoints the Panel of Auditors in terms of Webtrust: The Panel of Auditors is appointed for a period of 3 years. The applicant chooses an auditor from the panel;

2. Applicant downloads Application from the SAAA website:

3. Applicant declares to the SAAA if they are a CA or an RA: Applicant should in writing by email or formally state what they are at the time of application. Only a CA can proceed to submit application, not an RA;

4. Applicant approach the Panel of Auditors: Applicant choose who they want to conduct an audit for them from among the Panel;

5. Applicant appoint auditor: Appoint from the Panel of Auditors;

6. Applicant & auditor sign a Non-Disclosure Agreement: The NDA is between the chosen auditor and the client who is the applicant;

7. Auditor performs audit on the Applicant: The chosen auditor conducts an audit in terms of the ECT Act;

8. Auditor sends audit report with comments / recommendations; Upon completion of the audit, the auditor sends the audit to the applicant. The report should indicate recommendations.

9. Applicant pays for the audit: The audit report is paid by the applicant;

10. Audited application report submitted to the SAAA by the Applicant: Applicant takes the audited report from the auditor of choice and attach a completed form onto the audited report;

11. SAAA verifies if Application is complete: The SAAA will go through the application to check if all requirements are part of the submitted document;

12. SAAA appoints the evaluator to adjudicate the application received: The evaluator conducts their own evaluation in terms of the ECT Act and its Regulation;

13. Applicant is evaluated: Evaluation is based on the ECT Act, and more details are illustrated in the Regulation;

14. Evaluator submits the evaluated report to the SAAA; Once adjudication of the audited report is completed, it is handed over to the SAAA. This report indicates the findings and records the evaluator’s recommendations;

15. SAAA considers the report & decides to grant or deny accreditation: The decision will be informed by the report from the evaluator;

15(a). Accreditation approved for a Certification Authority: To be eligible for accreditation, the applicant must be Certification Authority at the time of application.

15(b). Accreditation denied or granted with conditions: If requirements are not met, application will be denied, however, accreditation maybe granted with conditions if what the applicant lacks is not fundamental to what is required, and that it can be easily rectified.

Your content goes here. Edit or remove this text inline or in the module Content settings. You can also style every aspect of this content in the module Design settings and even apply custom CSS to this text in the module Advanced settings.

Your content goes here. Edit or remove this text inline or in the module Content settings. You can also style every aspect of this content in the module Design settings and even apply custom CSS to this text in the module Advanced settings.

Name of The Account Holder: Department of Communications and Digital Technologies

Name of Bank: Standard Bank

Branch Code: 010045

Account Number: 010523774

Branch Code Electronic Payment: 051001

Type of An Account: Current Account

Swift Address: SBZA ZA JJ

Reference: Applicant’s Company Name