¶ºÒõ¹Ý

Compliance is the root of trust

A doctor who didn’t go to medical school. A pilot without a license. A judge who didn’t pass the bar exam. Without an empirical baseline defining the requirements for operation within an industry, there’s no way to set a professional, societal and legal baseline—and no way to prevent malpractice or even malicious intent.

In other words, there is no trust.

That’s the role of compliance—establishing an official and broadly accepted common denominator of trust. But there’s a massive difference between being passively compliant and proactively practicing compliance. Think of it this way: would you rather fly with a pilot who met the minimum licensing standards, or one who was actively keeping up to date on the latest practices and developments?

Setting the standard in standards

The key to ensuring ongoing compliance—and ensuring that the compliance requirements themselves set an adequate baseline—is active collaboration and participation in the governing bodies that define the standards.

¶ºÒõ¹Ý has a long-standing role within the CA/Browser Forum, including leading working groups tasked with the continued advancement of global standards for TLS/SSL, S/MIME, and code-signing certificates. We are also deeply involved in a wide range of global industry bodies that set the requirements for our sector, from LAMPS and Post-Quantum Cryptography to electronic signatures and financial services.