## page was renamed from Audit/TopAuditMinutes20070921
[[Audit/CommunityReport20080111|Next]] in series of [[AuditPresentations|reports]].

== Presentation before 'exec' Pirmasens 20070921 ==

 1.  Where is the audit?  To answer this, consider what the audit is. By way of a quick and informal illustration, it results in an opinion such as:
  * Management
  * puts in place procedures and policies
  * that meets the criteria.
  * And, the procedures and policies are followed.
 1. What are these policies and procedures?  These are documents that you have to write;  policies that you have to create and get approved.
 1. The board has approved these critical policies:
  * NRP --(D A L)-- ''(Editor's note:  that doc since withdrawn, replaced by [[RDL]])''
  * [[http://www.cacert.org/policy/DisputeResolutionPolicy.php|Dispute Resolution]]
  * [[http://www.cacert.org/policy/CAcertCommunityAgreement.php|CAcertCommunityAgreement]] (was Registered User Agreement)
  * [[http://svn.cacert.org/CAcert/PolicyOnPolicy.html|Policy on Policy]]
  * [[http://svn.cacert.org/CAcert/principles.html|Principles]] (''approved in Principle'')
 1.   These are big changes, they must be understood and dealt with by all senior people.  All [[http://wiki.cacert.org/wiki/Officers|Officers]] will have to:
  * understand them
  * explain them
  * find the other people in their area and make sure that they understand them
 1. All Assurers will be trained and tested on these policies.
 1. Audit over the systems is still blocked by the systems not being migrated (and more precisely not under dual control).
 1. The Board asserted that the board had as of this week gained control over all assets and was "in control."  ''[[TopMinutes-20070917|m20070919.1]]''  Any residual oversight as asserted by Audit around December 2006 is now terminated, and the board is fully responsible for CAcert Inc.  This means that the "no deals" restriction imposed by Audit is fully lifted.
 1. R/L/O has now been documented in policy form (above). CAcert Inc and users may now approach partners with discussions on root lists and so forth.  This also means that PublicRelationsOfficer may now be more proactive.
 1. Board considered and approved a [[http://svn.cacert.org/CAcert/Funding/proposal_funding_audit.html|Proposal for Audit Funding]].   ''Note that the original proposal for funding was removed and replaced by [[http://svn.cacert.org/CAcert/CAcert_Inc/Funding/|actual agreements]].''  See also [[TopMinutes-20070917|m20070919.5]]

----
CategoryAudit