MP073 'Alteration of SMKI Repository information and documentation'

Problem Statement

The policy intent in respect of the SMKI Repository is that no information, document or other material that is placed in the SMKI Repository should be deleted, changed, altered, amended, modified or replaced in any way. This is to enable all Eligible Subscribers and Relying Parties to be reliant on the integrity of the information held in the SMKI Repository the content of which is described in SEC Section L5.1.

SEC Section L5 places obligations on the SMKI PMA to lodge, or to require the DCC to lodge, modified information or documents in the SMKI Repository. However, ambiguity within SEC Section L, due to different interpretations of Section L3.22, has lead to the DCC deleting information in SMKI Organisation and Device Certificates without SMKI PMA governance or approval. BEIS has advised that the DCC is not intended, under the SEC, to make any changes to information in the SMKI Repository and that the DCC is a ‘person’ within the meaning of SEC Section L5.5 and L5.6. The proposer wishes to remove any ambiguity from the SEC drafting and ensure there are robust governance arrangements in place.

The full Draft Proposal can be found here

Latest Progress

The Change Sub-Committee has agreed that this issue has been fully defined and is ready to be converted into a Modification Proposal. This Draft Proposal will be presented to the SEC Panel on 14 June 2019.

Does this issue affect your company? Send us your comments to SEC.change@talan.com

We have yet to receive any comments on this proposal. Any comments we do receive will be published on this page.

Clarifying within SEC Section L5 the oversight the SMKI PMA has over any changes proposed to the SMKI Repository.