On the request of Trust Services Branch Norway, a branch of Trust Services ApS (part of Nets Group), the annual certification audit on all areas and processes was performed by BSI Group The Netherlands B.V. (John M. Keynesplein 9, 1066 EP Amsterdam, The Netherlands).
The certification audit covered all applicable requirements from the audit criteria listed below (see “Audit Information”) and are defined in Nets Statement of Applicability, dated 31 August 2023 and the Overview of Applicability, dated 19 October 2022.
The scope of the assessment comprised the provision of the following Trust Service component:
-,,"Registration Service" (partial): Remote identity proofing of trust service subjects by “Nets' Identity Verification Service “Nets ID Verifier”, supporting the ETSI TS 119461 Use Case for Unattended remote identity proofing (9.2.3): "Automated operation" (9.2.3.4)"
The Trust Service component is partly performed by subcontractors under the final responsibility of Nets.
The Trust Service component is provided to (qualified) Trust Service Providers.
The Trust Service component is being provided for the following qualified trust services as defined in Regulation (EU) 910/2014 (eIDAS):
-,,Provision of qualified certificates for electronic signatures (qualified trust service)
-,,Provision of qualified certificates for electronic seals (qualified trust service)
-,,Provision of qualified certificates for website authentication (qualified trust service)
The Trust Service component practices are described in the following document:
-,,Nets - Trust Service Practice Statement (TSPS) & Identity Proofing Service Practice Statement (IPSPS) for the Identity Verification Service Nets ID Verifier (former Nets Passport Reader), version 2.2, 1 September 2023.
Our annual certification audit was performed in September 2023. Based on the objective evidence collected during the certification audit for the period from 1 September 2022 through 31 August 2023:
-,,we conclude that the areas assessed during the audit were generally found to be effective, based on the applicable requirements defined in Nets’ Statement of Applicability, dated 31 August 2023 and the Overview of Applicability, dated 19 October 2022.
-,,we confirm that the following identification method provides equivalent assurance in terms of reliability to physical presence, pursuant to Regulation (EU) 910/2014 (eIDAS) art. 24.1 sub d, for the Trust Services component (and Identity Proofing Context) covered by this Certificate of Conformity:
“Nets Identity Verification Service “Nets ID Verifier”, supporting the ETSI TS 119461 Use Case for Unattended remote identity proofing (9.2.3): "Automated operation" (9.2.3.4)".
Audit information:
Audit criteria:
-,,Regulation (EU) No 910/2014 (eIDAS) of 23 July 2014 on electronic identification and trust services for electronic transactions in the internal market and repealing Directive 1999/93/EC, chapter III Trust Services, specifically art. 24.1 sub d
-,,ETSI EN 319 411-2 v2.4.1 (2021-11) Electronic Signatures and Infrastructures (ESI) - Policy and security requirements for Trust Service Providers issuing certificates;- Part 2: Requirements for trust service providers issuing EU qualified certificates including the applicable requirements included by reference from ETSI EN 319 401 v2.3.1 and ETSI EN 319411-1 v1.3.1
Supporting standards to ETSI EN 319411-2:
-,,ETSI TS 119 461 v1.1.1 (2021-07): Electronic Signatures and Infrastructures (ESI); Policy and security requirements for trust service components providing identity proof-ing of trust service subjects, incl. applicable requirements included by reference from ETSI EN 319 401 v2.3.1
-,,BITS - Requirements for solutions for Secure digital verification of identity, pilot ver-sion, December 2020, for the profiles: pub-high (services of high Level of Assurance (EU certs and NO certs), incl. all requirements for pub-subst. Applicable chapters: 7, 8, 9, 10, 11, 12, 14.
Audit Point in Time:
1 September 2022 through 31 August 2023
Audit performed:
September 2023
Information and Contact:
BSI Group the Netherlands B.V., John M. Keynesplein 9, 1066 EP Amsterdam, NL
|
