Audit Creation Sample Clauses

Audit Creation. An audit assessment allows for an independent examination of an entity’s security process or implementation. The Authorized Assessor will provide an objective assessment of pre-determined aspects and properties of the audited entity that are relevant to the scope of the audit. With respect to the security of private keys in DER equipment, the following aspects are core to the audit: 1. Process to create the private/public key pair. 2. Process to provision the created private/public key pair into the DER equipment. 3. Mechanisms to protect access to the private key within the final DER equipment. NOTE: In the case of hardware secure environments like TPMs or Secure Elements (SE), the private/public key pair can be created on the same hardware where the key is stored. Hence, no separate provisioning step is needed. This information will be recorded in the audit covering the key provisioning part. NOTE: The assessment of the first two steps are referred to as the Process Assessment within this document. The assessment of the 3rd step is referred to as the Component Assessment. There are four relevant actors in this use case- the Key Generator, the DER Client, the Authorized Assessor, and the Governing Body. The audit creation use case is shown in Figure 4. Key Generator to create & provision keys Establish process Implement mechansims DER Client to store & protect keys Audit Creation Conduct audit & store results on Blockchain Authorized Assessor