Discussion Period Begins | NS-010: Restructure Requirements Sections, Remove Expired Effective Dates, and Update NIST Reference

[Qais Al Hajri]

Ballot NS-010 is proposed by Qais Al Hajri (Microsoft) and endorsed by Trevoli Ponds-White (Amazon), Andrea Holland (IdenTrust), and Tim Hollebeek (DigiCert).

Purpose of Ballot

This ballot proposes the following changes to the NCSSRs:

Structural changes

 - New Section 1 "CA Infrastructure Inventory": the inventory requirement ("The CA MUST define an inventory of its CA Infrastructure") is separated into its own top-level section for clarity and emphasis.

 - Section renumbering - all subsequent sections bumped by one:

     Section 1 to Section 2 (CA Infrastructure and Network Boundary Control Configuration)

     Section 2 to Section 3 (Access Control)

     Section 3 to Section 4 (Monitoring, Logging, Auditing, and Incident Response)

     Section 4 to Section 5 (Vulnerability Management)

 - Cross-references updated: all internal section references and anchor links updated to reflect the new numbering.

Removal of expired effective dates

 - Removed "Prior to 12-Nov-2025 / Effective 12-Nov-2025" transition language (the date is now past).

 - Consolidated vulnerability-management applicability: replaced the phased SHOULD/MUST language (expired 15-Apr-2026) with a single MUST statement.

External reference update

 - Updated the NIST reference in Section 3.2.5 from "NIST 800-63B Revision 3 Appendix A" to "NIST SP 800-63B Revision 4 Appendix A".

Motion

The following motion has been proposed by Qais Al Hajri (Microsoft) and endorsed by Trevoli Ponds-White (Amazon), Andrea Holland (IdenTrust), and Tim Hollebeek (DigiCert).

You can view and comment on the Github pull request representing this ballot here.

Motion begins

This ballot modifies the "Network and Certificate System Security Requirements," based on version 2.0.5, as shown in the immutable redline: https://github.com/cabforum/netsec/compare/3c98854b95b1bcaf0525db6e9c06908aa1999814...fde959546c1223fa6b3bc937b77740aa4af1a5fb

Motion ends

Discussion (at least 7 days)

• Start time: Tuesday, June 30, 2026 17:00:00 UTC (2026-06-30T17:00:00Z)
• End time: on or after Tuesday,  July 7, 2026 17:00:00 UTC (2026-07-07T17:00:00Z)

Vote for approval (7 days)

• Start time: TBD
• End time: TBD

If the Initial Vote passes, a 30-day IPR Review Period will follow per Bylaws Section 2.4 and the IPR Policy.

Feedback and suggested revisions are welcome during the discussion period.

Thanks, 

Qais Al Hajri

[Tathan Thacker]

IdenTrust votes “yes" on Ballot NS-010

From: 'Qais Al Hajri' via NetSec WG - Public (CA/B Forum) <net...@groups.cabforum.org>
Date: Tuesday, June 30, 2026 at 11:53
To: 'Ben Wilson' via NetSec WG - Public (CA/B Forum) <net...@groups.cabforum.org>
Subject: [External][Possible SPAM][netsec] Discussion Period Begins | NS-010: Restructure Requirements Sections, Remove Expired Effective Dates, and Update NIST Reference

--
You received this message because you are subscribed to the Google Groups "NetSec WG - Public (CA/B Forum)" group.
To unsubscribe from this group and stop receiving emails from it, send an email to netsec+un...@groups.cabforum.org.
To view this discussion visit https://groups.google.com/a/groups.cabforum.org/d/msgid/netsec/EA2SPRMB00202CFBE45C9EFE33B11D7BE8F72%40EA2SPRMB0020.namprd00.prod.outlook.com.