[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"doc-detail-160177-en":3,"doc-seo-160177-105":30,"detail-sidebar-cat-0-en-105":91},{"code":4,"msg":5,"data":6},0,"success",{"doc_id":7,"user_id":8,"nickname":9,"user_avatar":10,"doc_module":4,"category_id":11,"category_name":12,"doc_title":13,"doc_description":14,"doc_content":15,"file_id":16,"file_url":17,"file_type":18,"file_size":19,"view_count":4,"is_deleted":4,"is_public":20,"is_downloadable":20,"audit_status":20,"page_count":21,"language":22,"language_code":23,"site_id":24,"html_lang":23,"table_of_contents":25,"faqs":26,"seo_title":27,"seo_description":14,"update_tm":28,"read_time":29},160177,962085564381,"Bintang","https://ap-avatar.wpscdn.com/davatar_6f874abed73319feea01a86fa6f0fab8",8,"Research & Report","Microsoft Public Key Infrastructure Services - Independent Accountants’ Opinion Report and Management Assertion February 2025","Independent accountants’ report on Microsoft Public Key Infrastructure Services’ management assertion regarding Certification Authority (CA) operations in the United States and Ireland for the CAs listed in Attachment A. The scope covers maintenance of effective controls to provide reasonable assurance that CA/Browser Forum Network and Certificate System Security Requirements for Principle 4, Criterion 4.6 were met during May 1, 2024 to October 31, 2024 under WebTrust Principles and Criteria for Certification Authorities – Network Security v1.7. The report includes responsibilities, independence, control limitations, and a qualified opinion tied to remediation.","Deloitte & Touche LLP  \n1015 2nd Ave, Suite 500 Seattle, WA 98104 Tel: +1 206 716 7000  \nFax: +1 206 965 7000 [www.deloitte.com](www.deloitte.com)  \nINDEPENDENT ACCOUNTANT’S REPORT  \nTo the management of Microsoft Public Key Infrastructure Services (“MS PKI Services”):  \nScope  \nWe have examined MS PKI Services management’s assertion that for its Certification Authority (“CA”) operations in the United States of America, and in Ireland, for CAs as enumerated in Attachment A, MS PKI Services has:  \n• maintained effective controls to provide reasonable assurance that it meets the Network and Certificate System Security Requirements for Principle 4 Criterion 4.6 as set forth by the CA/Browser Forum  \nthroughout the period May 1, 2024 to October 31, 2024 based on the WebTrust Principles and Criteria for Certification Authorities – Network Security, v1.7 .  \nThere are other CA hierarchies and PKI operations across Microsoft that are not managed by MS PKI services. These CA hierarchies and PKI operations are not in the scope of this examination, and this opinion does not extend to these services.  \nCertification authority’s responsibilities  \nMS PKI Services’ management is responsible for its assertion, including the fairness of its presentation, and the provision of its described services in accordance with the WebTrust Principles and Criteria for Certification Authorities – Network Security, v1 .7.  \nPractitioner’s responsibilities  \nOur responsibility is to express an opinion, based on our examination, based on our examination. Our examination was conducted in accordance with AT-C Section 205, Assertion-Based Examination Engagements, established by the American Institute of Certified Public Accountants, and International Standard on Assurance Engagements (“ISAE”) 3000, Assurance Engagements Other Than Audits Or Reviews Of Historical Financial Information. Those standards require that we plan and perform our examination to obtain reasonable assurance about whether management’s assertion is fairly stated, in all material respects. An examination involves performing procedures to obtain evidence about management’s assertion. The nature, timing, and extent of the procedures selected depend on our judgment, including an assessment of the risks of material misstatement of management’s assertion, whether due to fraud or error. We believe that the evidence we obtained is sufficient and appropriate to provide a reasonable basis for our opinion.  \nOur independence and quality control  \nWe are required to be independent and to meet other ethical responsibilities in accordance with the Code of Professional Conduct established by the American Institute of Certified Public Accountants (“AICPA”) and Code of Ethics for Professional Accountants (including International Independence Standards) issued by the International Ethics Standards Board of Accountants’ (“IESBA”) . We have complied with those requirements. We applied the Statements on Quality Control Standards established by the AICPA and the International Standards on Quality Management issued by the International Auditing and Assurance Standards Board (“IAASB”) and, accordingly, maintain a comprehensive system of quality control.  \nRelative effectiveness of controls  \nThe relative effectiveness and significance of specific controls at MS PKI Services and their effect on assessments of control risk for subscribers and relying parties are dependent on their interaction with the controls and other factors present at individual subscriber and relying party locations. Our examination did not extend to controls at individual subscriber and relying party locations and we have not evaluated the effectiveness of such controls.  \nInherent limitations  \nThere are inherent limitations in the effectiveness of any system of internal control, including the possibility of human error and the circumvention of controls. For example, because of their nature, controls may not prevent, or detect unauthorised ac","cbCaisMuobfbKrxX","https://ap.wps.com/l/cbCaisMuobfbKrxX","pdf",308227,1,15,"English","en",105,"# Scope\n# Responsibilities\n## Certification authority’s responsibilities\n## Practitioner’s responsibilities\n# Independence and quality control\n# Relative effectiveness of controls\n# Inherent limitations\n# Basis for qualified opinion\n# Practitioner’s opinion\n# Use of the WebTrust seal\n# Attachment A - List of in scope CAs","[{\"question\":\"What period and regions are covered by the examination?\",\"answer\":\"The examination covers CA operations in the United States of America and in Ireland for the period May 1, 2024 to October 31, 2024.\"},{\"question\":\"What specific security requirement is assessed?\",\"answer\":\"The report assesses whether effective controls provide reasonable assurance that the Network and Certificate System Security Requirements for Principle 4 Criterion 4.6 were achieved under the stated WebTrust criteria.\"},{\"question\":\"Why is the opinion qualified, and what changed after remediation?\",\"answer\":\"For May 1, 2024 to August 6, 2024, the CA did not maintain sufficient controls for the requirement. After remediation noted as of August 6, 2024, controls were sufficient for August 7, 2024 to October 31, 2024.\"}]","Microsoft Public Key Infrastructure Services - Independent Accountants’ Opinion Report and Management Assertion February 2025 | PDF",1788051286,38,{"code":4,"msg":31,"data":32},"ok",{"site_id":24,"language":23,"slug":33,"title":13,"keywords":34,"description":14,"schema_data":35,"social_meta":86,"head_meta":88,"extra_data":90,"updated_unix":28},"microsoft-public-key-infrastructure-services-independent-accountants-opinion-report-and-management-assertion-february-2025","",{"@graph":36,"@context":85},[37,54,68],{"@type":38,"itemListElement":39},"BreadcrumbList",[40,44,48,51],{"item":41,"name":42,"@type":43,"position":20},"https://docshare.wps.com","Home","ListItem",{"item":45,"name":46,"@type":43,"position":47},"https://docshare.wps.com/document/","Document",2,{"item":49,"name":12,"@type":43,"position":50},"https://docshare.wps.com/document/research-report/",3,{"item":52,"name":13,"@type":43,"position":53},"https://docshare.wps.com/document/microsoft-public-key-infrastructure-services-independent-accountants-opinion-report-and-management-assertion-february-2025/160177/",4,{"url":52,"name":13,"@type":55,"author":56,"headline":13,"publisher":58,"fileFormat":61,"inLanguage":23,"description":14,"dateModified":62,"datePublished":62,"encodingFormat":61,"isAccessibleForFree":63,"interactionStatistic":64},"DigitalDocument",{"name":9,"@type":57},"Person",{"url":41,"name":59,"@type":60},"DocShare","Organization","application/pdf","2026-08-30",true,{"@type":65,"interactionType":66,"userInteractionCount":4},"InteractionCounter",{"@type":67},"ViewAction",{"@type":69,"mainEntity":70},"FAQPage",[71,77,81],{"name":72,"@type":73,"acceptedAnswer":74},"What period and regions are covered by the examination?","Question",{"text":75,"@type":76},"The examination covers CA operations in the United States of America and in Ireland for the period May 1, 2024 to October 31, 2024.","Answer",{"name":78,"@type":73,"acceptedAnswer":79},"What specific security requirement is assessed?",{"text":80,"@type":76},"The report assesses whether effective controls provide reasonable assurance that the Network and Certificate System Security Requirements for Principle 4 Criterion 4.6 were achieved under the stated WebTrust criteria.",{"name":82,"@type":73,"acceptedAnswer":83},"Why is the opinion qualified, and what changed after remediation?",{"text":84,"@type":76},"For May 1, 2024 to August 6, 2024, the CA did not maintain sufficient controls for the requirement. After remediation noted as of August 6, 2024, controls were sufficient for August 7, 2024 to October 31, 2024.","https://schema.org",{"og:url":52,"og:type":87,"og:title":13,"og:site_name":59,"og:description":14},"article",{"robots":89,"canonical":52},"index,follow",{"doc_id":7,"site_id":24},{"code":4,"msg":5,"data":92},[93,97,101,105,110,115,120,123,128,131,135],{"id":20,"doc_module":4,"doc_module_name":46,"category_name":94,"show_sort_weight":95,"slug":96},"Story & Novel",90,"story-novel",{"id":47,"doc_module":4,"doc_module_name":46,"category_name":98,"show_sort_weight":99,"slug":100},"Literature",80,"literature",{"id":53,"doc_module":4,"doc_module_name":46,"category_name":102,"show_sort_weight":103,"slug":104},"Exam",70,"exam",{"id":106,"doc_module":4,"doc_module_name":46,"category_name":107,"show_sort_weight":108,"slug":109},5,"Comic",60,"comic",{"id":111,"doc_module":4,"doc_module_name":46,"category_name":112,"show_sort_weight":113,"slug":114},6,"Technology",50,"technology",{"id":116,"doc_module":4,"doc_module_name":46,"category_name":117,"show_sort_weight":118,"slug":119},7,"Healthcare",40,"healthcare",{"id":11,"doc_module":4,"doc_module_name":46,"category_name":12,"show_sort_weight":121,"slug":122},30,"research-report",{"id":124,"doc_module":4,"doc_module_name":46,"category_name":125,"show_sort_weight":126,"slug":127},9,"Religion & Spirituality",20,"religion-spirituality",{"id":126,"doc_module":4,"doc_module_name":46,"category_name":129,"show_sort_weight":126,"slug":130},"World Cup","world-cup",{"id":132,"doc_module":4,"doc_module_name":46,"category_name":133,"show_sort_weight":132,"slug":134},10,"Lifestyle","lifestyle",{"id":136,"doc_module":4,"doc_module_name":46,"category_name":137,"show_sort_weight":106,"slug":138},19,"General","general"]