(title available in French only)
Official Binding
Note
ETSI standard setting the requirements applicable to conformity assessment bodies that audit trust service providers (version 2.2.2).
The full text is not reproduced here (copyright): see the official source.
Summary
Purpose
European standard ETSI EN 319 403 (version 2.2.2, August 2015) sets requirements for conformity assessment bodies that assess and certify trust service providers ETSI EN 319 403 V2.2.2, § 1 Scope ETSI EN 319 403 V2.2.2, History. Its scope begins as follows:
The present document contains requirements for the competence, consistent operation and impartiality of conformity assessment bodies assessing and certifying conformity of trust service providers (TSPs)
It applies to trust service providers the general requirements of standard ISO/IEC 17065, which concerns certification bodies ETSI EN 319 403 V2.2.2, § 1 Scope ISO/IEC 17000, 17011, 17020, 17021-1, 17025, 17029, 17065, 17067.
Who it applies to
To conformity assessment bodies already accredited under this version, or an earlier one, during a transitional period set by Implementing Regulation 2025/2162 Art. 9.
Key points
- General requirements: legal and contractual matters, management of impartiality, liability, confidentiality, publicly available information ETSI EN 319 403 V2.2.2, § 4 General requirements.
- Resources: competence of the personnel involved in audits ETSI EN 319 403 V2.2.2, § 6.1 Conformity Assessment Body personnel.
- Process: application, audit (scope, duration, report, frequency), review, certification decision, documentation, surveillance ETSI EN 319 403 V2.2.2, § 7 Process requirements.
- Independence from the type of service: the requirements depend neither on the type nor on the class of the trust service ETSI EN 319 403 V2.2.2, § 1 Scope.
What the act applies, and how
Implementing Regulation 2025/2162 does not retain this version for new accreditations: a body is accredited under standard EN ISO/IEC 17065:2012 supplemented by ETSI EN 319 403-1 version 2.3.1 Art. 2(1) ETSI EN 319 403-1 V2.3.1. Version 2.2.2 appears only in the grandfathering provision:
Conformity assessment bodies that have, before 17 November 2025, been accredited with reference to standard ETSI EN 319 403 version 2.2.2, or earlier version, for the purposes of the assessment of conformity with Regulation (EU) No 910/2014 of qualified trust service providers and the qualified trust services they provide shall have their accreditation be considered to meet the requirements of Article 2(1) until 17 May 2027.
A recital adds that these bodies would not need to be re-accredited under Regulation 910/2014 until 17 May 2027, and should then be evaluated by the national accreditation body against the requirements of the implementing regulation laying down rules for the application of Regulation (EU) No 910/2014 of the European Parliament and the Council as regards the accreditation of conformity assessment bodies performing the assessment of qualified trust service providers and the qualified trust services they provide, the conformity assessment report and the conformity assessment scheme.
Cited version
Implementing Regulation 2025/2162 cites version 2.2.2 in its transitional provision Art. 9. The history of ETSI EN 319 403-1 presents version 2.2.2 as published under number EN 319 403, then version 2.3.1 (June 2020) under number EN 319 403-1 ETSI EN 319 403-1 V2.3.1, History; it is the latter that the general accreditation rule of the regulation targets Art. 2(1).
Important clauses
- ETSI EN 319 403 V2.2.2, § 1 Scope: scope.
- ETSI EN 319 403 V2.2.2, § 7 Process requirements: assessment and certification process.
- ETSI EN 319 403 V2.2.2, § 8 Management system requirements: management system of the body.
Links
- Next version, ETSI EN 319 403-1 ETSI EN 319 403-1 V2.3.1.
- Requirements assessed at providers: ETSI EN 319 401 ETSI EN 319 401 V3.1.1.
- Learning path: step 5, certification and standards.
ETSI standard: the site reproduces only short extracts; the full text is available from ETSI ETSI EN 319 403 V2.2.2. Written by Asphalia.