1. ©2005 KPMG LLP, the U.S. member firm of KPMG International, a Swiss cooperative. All rights reserved. July 27, 2005 PKI Audits and Assessments “Another Bump on the Road” Noel Nazario, IRM Manager KPMG

2. ©2005 KPMG LLP, the U.S. member firm of KPMG International, a Swiss cooperative. All rights reserved. July 27, 2005 Agenda Background PKI “Audit” Activities PKI and other Audit Activities What’s Next Discussion

3. ©2005 KPMG LLP, the U.S. member firm of KPMG International, a Swiss cooperative. All rights reserved. July 27, 2005 Background Qualifications –Noel Nazario is a manager in KPMG’s Washington DC, Information Risk Management Practice. He is the auditor for the U.S. Federal Bridge Certification Authority and several other agency PKI systems. Occasionally, he offers solicited and unsolicited input to the U.S. Federal PKI Certificate Policy Working Group, the FPKI Policy Authority, and the Federal Identity Credentialing Committee (FICC). Mr. Nazario is a NIST Alumni and has been involved in the development of PKI technology and management since the early 1990s. Who’s the Bump? Coping

4. ©2005 KPMG LLP, the U.S. member firm of KPMG International, a Swiss cooperative. All rights reserved. July 27, 2005 PKI “Audit” Activities X9.79 - Framework for Developing Public Key Policy and Practices in the Financial Services Industry CA Control Objectives ABA PKI Assessment Guidelines AICPA/CICA Web Trust for CA FBCA Compliance Assessments Shared Service Provider Compliance

5. ©2005 KPMG LLP, the U.S. member firm of KPMG International, a Swiss cooperative. All rights reserved. July 27, 2005 PKI and other “Audit” Activities Certification & Accreditation (C&A) per OMB A-130 Federal Information Security Management Act (FISMA) Financial Audits

6. ©2005 KPMG LLP, the U.S. member firm of KPMG International, a Swiss cooperative. All rights reserved. July 27, 2005 What’s Next? HSPD 12 Self Certifications Bridge to Bridge Cross Certifications Federation Compliance Registration Compliance Commoditization

7. ©2005 KPMG LLP, the U.S. member firm of KPMG International, a Swiss cooperative. All rights reserved. July 27, 2005 Discussion Q? A? Noel Nazario – NNazario@KPMG.com 202-255-3071NNazario@KPMG.com