30(a) Security Policy: Summary of the security policy for the proposed registry

Prototypical answer:

The Registry Operator has outsourced the technical back-end registry operations to OpenRegistry S.A., the (backend) Registry Service Provider. Within the OpenRegistry group, Sensirius, doing business as OpenRegistry Belgium, as an Affiliate of OpenRegistry S.A., is the operational entity that will be running the registry operations for the entire group.

The Registry Service Provider has put in place an Information Security Management System (ISMS) for its registry operation activities. For a full description of the ISMS, reference is made to the response to question 30b.
The ISMS has been recently audited by Deloitte Bedrijfsrevisoren, Belgium. The report for this independent assessment of the security system is attached to question 30b.
For reasons of confidentiality, all elements related to security (including elements indicated in question 30a and a summary of the security policy) have been addressed in the response to question 30b. Attached to the response to question 30b are also the policies that are put in place by the Registry Service Provider for assuring the registry operations on behalf of the Registry Operator.

Similar gTLD applications: (14)