ETSI deliverables

Návrh národného stanoviska

K návrhom týchto noriem Národný sekretariát ETSI (NS ETSI) eviduje pripomienky.

AP 20240530 Comments on draft ETSI EN 319 401 V3.1.0 (2024-03)

Electronic Signatures and Trust Infrastructures (ESI); General Policy Requirements for Trust Service Providers

Electronic Signatures and Infrastructures (ESI)

NSO	Clause / Sub-clause	Paragraph Figure / Table	Type of comment (Technical⁽¹⁾ or Non-Technical)	COMMENTS	Proposed change	OBSERVATIONS on each comment submitted
SK1	7.9.2 Incident response	The second bullet (point), page 22	Non-Technical	The EXAMPLE 1 of the second bullet (point) to the REQ-7.9.2-02X in the clause 7.9.2 on the page 22 · REQ-7.9.2-02X: The TSP shall comply with reporting obligations as mandated by relevant legislative frameworks for network and information security incidents, including supervisory authorities and CSIRTs. EXAMPLE 1: Relevant legislative frameworks such as DORA, CER, eIDAS, CRA, DSA, DGA, etc. contains abbreviations: DORA, CER, eIDAS, CRA, DSA, DGA The abbreviations DORA, CER, eIDAS, CRA, DSA, DGA are not published in clause 3.3 Abbreviations on the page 11.	It is recommended to add abbreviations *DORA Digital Operational Resilience Act* *CER Canonical Encoding Rules* *eIDAS* *electronic IDentification, Authentication and trust Services* *CRA Constant-Rate Assignment* *DSA Digital Signature Algorithm* *DGA Digital Government Authority* in clause 3.3 Abbreviations on the page 11.
SK2	7.14.1 Supply chain policy	The first paragraph, page 26	Non-Technical	The first paragraph of the clause 7.14.1 on the page 26 contains abbreviation ICT The abbreviation ICT is not published in clause 3.3 Abbreviations on the page 11.	It is recommended to add abbreviation *ICT Information & Communication Technology* in clause 3.3 Abbreviations on the page 11.
SK3	7.14.3 Responsibility, third parties agreements and SLA	Page 27	Non-Technical	The name of clause 7.14.3 on the page 27 contains abbreviation SLA The abbreviation SLA is not published in clause 3.3 Abbreviations on the page 11.	It is recommended to add abbreviation SLA Service-Level Agreement in clause 3.3 Abbreviations on the page 11.

Na základe tejto skutočnosti NS ETSI odporučí Úradu pre normalizáciu metrológiu a skúšobníctvo Slovenskej republiky odoslať Európskemu inštitútu pre telekomunikačné normy súhlasné národné stanoviská.