BS ISO/IEC 20243-2:2023

Information technology. Open Trusted Technology ProviderTM Standard (O-TTPS). Assessment procedures for the O-TTPS | Status: Current

1 Scope The Assessment Procedures defined in this document are intended to ensure the repeatability, reproducibility, and objectivity of assessments against the O-TTPS. Though the primary audience for this document is the assessor, an Information Technology (IT) provider who is undergoing assessment or preparing for assessment, may also find this document useful.

1.1 Conformance

The Open Group has developed and maintains conformance criteria, assessment procedures, and a Certification Policy and Program for the O-TTPS as a useful tool for all constituents with an interest in supply chain security. The conformance requirements and assessment procedures are available in the O-TTPS, Part 2: Assessment Procedures for the O-TTPS. Certification provides formal recognition of conformance to the O-TTPS, which allows:

• — Providers and practitioners to make and substantiate clear claims of conformance to the O-TTPS
• — Acquirers to specify and successfully procure from providers who conform to the O-TTPS