Lesson 8: Four Critical Checklist Items

Back | Next

Lesson 8 focuses on four CROMERR System Checklist items that are closely related to the two key decisions discussed in Lesson 7, namely:

• Item 3: Issuance (or Registration) of a Signing Credential in a Way that Protects it from CompromiseCompromise In relationship to an electronic signature device, refers to when the device's code or mechanism is available for use by any other person.
  To reference the key decisions discussed in Lesson 7, see: Lesson 7: From Requirements to Specific Solutions
   
• Item 5: Binding of Signatures to Document Content
  To reference the key decisions discussed in Lesson 7, see: Lesson 7: Key Decision 1 - Type of Credential Used and Lesson 7: Key Decision 1 - Type of Credential Used (continued)
   
• Item 13: Credential Validation
  To reference the key decisions discussed in Lesson 7, see: Lesson 7: Key Decision 1 - Type of Credential Used and Lesson 7: Key Decision 1 - Type of Credential Used (continued)
   
• Item 18: Creation of CORCOR As defined in § 3.3 of CROMERR, a true and correct copy of an electronic document received by an electronic document receiving system, which copy can be viewed in a human-readable format that clearly and accurately associates all the information provided in the electronic document with descriptions or labeling of the information. A copy of record includes: 1) All electronic signatures contained in or logically associated with that document; 2) The date and time of receipt; and 3) Any other information used to record the meaning of the document or the circumstances of its receipt.
  To reference the key decisions discussed in Lesson 7, see: Lesson 7: Key Decision 2 - Defining the Copy of Record (COR)

These four checklist items are especially important to assuring both that:

• CORs maintained by your system truly represent what was submitted
• Any associated electronic signatures can be proved to be authentic

For each of these items, Lesson 8 provides both:

• General advice on how they can be addressed
• Specific examples of successful solutions drawn from already approved applications

Back | Next