CRAN is responsible for administering the accreditation framework for Certification Service Providers in Namibia. The accreditation process is designed to ensure that the accreditation of security products and services and providers of such products and services meet prescribed legal, technical, security, personnel and financial requirements before being authorised to operate as accredited Certification Service Providers within the national PKI ecosystem.
Applicants are required to submit relevant supporting documentation, which may include a Certificate Policy, Certification Practice Statement, technical and security specifications, incident management arrangements and business continuity plans.
The regulatory framework also provides for the accreditation of public and private CSPs and the recognition of qualifying foreign Certification Service Providers or Certifications Authority. Accredited providers are subject to ongoing compliance monitoring, periodic reviews and applicable renewal requirements.