ECSA Reference Calculations for Audits

1st Certification Responsability Effort (h)
        *** **** *****
Organisation Overal Coordination   AAO 3 4 6
  Coordination Auditor   AAO 3 6 6
  Customer Workshop to organize audit process   AAO 4 4 4
Audit Profile (Area1)   AAO 2 2 2
  Contract & Compliance (Area 2) per country and/or per contract version AA Legal 8 12 16
  Security and Data Privacy (Area 3) per Service AA Sec/DP 8 12 16
  Operation & Infrastruture (Area 4) per Datacentre (5 Stars already pre set with 2 DC) AA DC 8 12 32
  Processes (Area 5) per Service AA BPM 8 12 16
  Application (Area 6IPS) per Service AA CS 8 12 16
On Site Audit     AA SEC/DP/DC 8 12 16
Analysing + editing Auditreports     all AA & ECE 8 12 18
      AAO 4 4 4
Written final Auditreport     AAO 4 4 4
Issuing of Certificate + Publication on ECE Web     ECE flat flat flat
        76 108 156
      Effort in Mandays 10 14 20

green: multiplication factors
orange: mandatory effort for ECSA audits

Further remarks

The effort calculation is an average renumeration based on real certifications. The range might be adjusted for a concrete certification by +- 20 %

Each contract has to be assessed individually per Service and per target country.

A DC assessment is at least two for a 5 Star (High Availability) certification

A DC assessment might be replaced by other certificates as long as the scope is similar to the AREA 5 scope and the certifciation is at least one year valid

Recertification

40% of 1st certification