1st Certification | Responsability | Effort (h) |
*** | **** | ***** | ||||
Organisation | Overal Coordination | AAO | 3 | 4 | 6 | |
Coordination Auditor | AAO | 3 | 6 | 6 | ||
Customer Workshop to organize audit process | AAO | 4 | 4 | 4 | ||
Audit | Profile (Area1) | AAO | 2 | 2 | 2 | |
Contract & Compliance (Area 2) | per country and/or per contract version | AA Legal | 8 | 12 | 16 | |
Security and Data Privacy (Area 3) | per Service | AA Sec/DP | 8 | 12 | 16 | |
Operation & Infrastruture (Area 4) | per Datacentre (5 Stars already pre set with 2 DC) | AA DC | 8 | 12 | 32 | |
Processes (Area 5) | per Service | AA BPM | 8 | 12 | 16 | |
Application (Area 6IPS) | per Service | AA CS | 8 | 12 | 16 | |
On Site Audit | AA SEC/DP/DC | 8 | 12 | 16 | ||
Analysing + editing Auditreports | all AA & ECE | 8 | 12 | 18 | ||
AAO | 4 | 4 | 4 | |||
Written final Auditreport | AAO | 4 | 4 | 4 | ||
Issuing of Certificate + Publication on ECE Web | ECE | flat | flat | flat | ||
76 | 108 | 156 | ||||
Effort in Mandays | 10 | 14 | 20 |
green: multiplication factors
orange: mandatory effort for ECSA audits
Further remarks
The effort calculation is an average renumeration based on real certifications. The range might be adjusted for a concrete certification by +- 20 %
Each contract has to be assessed individually per Service and per target country.
A DC assessment is at least two for a 5 Star (High Availability) certification
A DC assessment might be replaced by other certificates as long as the scope is similar to the AREA 5 scope and the certifciation is at least one year valid
Recertification
40% of 1st certification