NAESB – Specific Obligations. NAESB Subscribers acknowledge their understanding of the following obligations to the WEQ PKI standards through GlobalSign. End Entities participating in the Business Practice Standard WEQ-012 v3.0 shall be required to be registered in the NAESB EIR and furnish proof that they are an entity authorized to engage in the wholesale electricity industry. Entities or organizations that may require access to applications using authentication specified u der the NAESB Business Pract ce Standard WEQ-012, but do not qualify as a wholesale electricity market participant (e.g., regulatory agencies, universities, consulting firms, etc.) must register. Registered End Entities and the user community they represent shall be required to meet to all End Entity obligations in these Business Practice Standards. Each subscriber organization acknowledges thei understanding of the following obligations to the WEQ 012 v3.0 PKI standard through GlobalSign CA as ollows:- Each End Entity organization shall certify to their certification entity that they have reviewed and acknowledge the following Business Practic Standard WEQ-012.
NAESB – Specific Obligations. NAESB Subscribers acknowledge their understanding of the following obligations to the WEQ PKI standards through GlobalSign. • Subscribers recognize and acknowledge the electric industry’s need for secure private electronic communications, meeting the goals of: o Privacy: The assurance to an entity that no one can read a particular piece of data except the receiver(s) explicitly intended; o Authentication: The assurance to one entity that another entity is who he/she/it claims to be; o Integrity: The assurance to an entity that data has not been altered (intentionally or unintentionally) between “there” and “here,” or between “then” and “now”; and o Non-Repudiation: A party cannot deny having engaged in the transaction or having sent the electronic message. • Subscribers recognize the Industry’s endorsement of Public Key cryptography which utilizes Public Key certificates to bind a person’s or computer system’s public key to its entity to support symmetric encryption key exchange. • Subscribers have reviewed WEQ standards with respect to industry guidelines for establishing a trusted Public Key Infrastructure (“PKI”). • Subscribers has evaluated the GlobalSign Certification Practices Statement (CPS) in light of WEQ standards. NAESB Subscribers are obligated to register their legal business identification, securing an industry recognized “Entity Code” that will be published in the NERC Registry and used in all Subscriber applications submitted by, and certificates issued to their organization. Subscribers shall also be required to identify, through the NERC Registry, that they have selected to use GlobalSign as their Authorized Certification Authority and acknowledge the following accompanying additional NAESB specific obligations: • Subscribers have executed any additional agreements/contracts beyond this Subscriber Agreement with GlobalSign as required by GlobalSign’s CPS. • Subscribers agree to comply with any additional obligations required and stipulated by GlobalSign within its CPS with respect to Certificate Application Procedures, Applicant Identity Proofing/Verification, and Certificate Management Practices. • Subscribers confirm that their organization has established a PKI Certificate Management Program and have trained all affected employees in accordance with that program, including the Subscriber, and that the Organization has established controls to ensure compliance with the program that includes, but is not limited to:- o Certificate issuanc...
