eValidated® Program for Certification and Assurance
eValidated® is designed to offer the industry an alternative to out-of-date, antiquated auditing processes for digital issuance systems. It is standards-based and is flexible to ever-changing industry demands, customized to clients actual identified requirements, a review of logical designs, inspection of physical protections, and validation of technical role skill proficiencies. eValid8® audits verify a number of critical components, resources, applications, policy, and practices deployed by the organization offering confidentiality, identification, trust, assurance, or authentication services. eValidated® is simply the best PKI / IT audit in the industry! eValid8® gives you a thorough audit, a comprehensive report, a free Internet Seal for display, Relying Party Referral Site, compliance letter and supporting audit report that demonstrates how you are conducting your business. eValidated® is the only Internet seal that truly provides confidence for web users, because validation is based upon current standards and not antiquated concepts or processes. Our process enables you to protect your company's most important assets and possessions: Your reputation, name recognition, brand, or seal. Other methodologies such as WebTrust and Better Business Bureau do not conduct PKI compliance audits in accordance with current Federal PKI guidelines or industry best practices. In addition, eValid8® does not have to add an additional "Extended Validation" audit cost for certification authorities with extended validity periods. eValidated® audits start with the premise trust is not determined by the length of the relationship, but in the relationship itself. One audit, one definition of trust, one cost. The eValidated® seal is administered exclusively by eValid8®. When you see an eValidated® web seal, it means the organization was exhaustively reviewed and assessed to the highest standards and did not just buy a seal. They earned the right to display this trusted seal because their services passed a thorough, methodically proven, firm but fair auditing process.
[time expended+cost of audit+quality of audit+Certified Professionals+PKI Experts=industry best value.]
eValidated® Certificate of Trusted Assurance states the system under review was examined by an independent Certified Information Systems Auditor (CISA) and PKI Expert. Furthermore, eValidated® Certificate of Trusted Assurance accurately represents if the entity's business, website, or solution is in compliance with stated corporate policies and recognized industry practices. eValidated ® program is a set of comprehensive audit principles and criteria designed for IT systems and electronic commerce. This set includes guidelines such as IETF RFC 2527/3647, NIST SP 800-37/53/53a/89 documents, International ISO 21188/27001/27002, and ISACA CobiT4 guidelines. These control families established for "Moderate" and "High" assurance systems are applied during all eValidated® audit engagements. This program is exclusively managed by eValid8® and lead auditors ethics are invoked by their governing professional association, the Information Systems Audit and Control Associations (ISACA). Only business systems that successful pass this audit can display an eValidated® Certificate of Trusted Assurance seal. eValidated® audit methodology verifies all aspects of an IT system or PKI certification authority. We independently validate skill sets of the technical staff, verify trustworthiness and integrity of the operational authority, and perform on-site inspections of hosting facility services. These inspections include power options, utilities, backup processes, archiving, IT hosting services, steam generation capabilities, diesel generation, DC battery plant, physical/logical access controls, egress procedures, disaster recovery capabilities, physical security, guards, gates, fire/water/electromagnetic protections, server configurations, firewall rules, user privileges, documentation, physical location, management oversight, and compliance with legislation and organizational policies.
|
