Abstract
Auditing is an important and necessary step for establishing trust among relying parities when running a CA, PKI, and IdM system. This session will discuss what implementers should have ready when establishing their PKI, what auditors will expect from implementers, and what auditors will provide to implementers. It will also offer some illustrative real-world scenarios. You'll hear from an auditor from a Big Four firm and the CIO of a PKI shop who worked with auditors.