Independent assessment report of the national registry of the Netherlands



Similar documents
Date: 02/ Liviu Turii/ Ministry of Environment and Climate Change John Bedard/SRA Markwin Pieters/UNFCCC

SUBSIDIARY BODY FOR SCIENTIFIC AND TECHNOLOGICAL ADVICE Twenty-first session Buenos Aires, 6 14 December 2004

Overview. Implementation of the international transaction log. Overall ITL role and approach. Support from ITL developer/operator

Advance unedited version

COMMISSION REGULATION (EU) No /.. of XXX

Annex 9: Technical proposal template. Table of contents

Session 7: Accounting and avoiding double counting Breakout Group Exercises

Proposal for a COUNCIL DECISION

Climate change is the defining challenge of our age. Ban Ki-moon, CMP 3, Bali, Indonesia

Conclusions and recommendations Seventh meeting of inventory lead reviewers Bonn, Germany March 2010

COMMISSION DECISION C(2013)343. of 22 January 2013

Improvement of Lithuania s National System for GHG inventory preparation

Call for Inputs on the Framework for Various Approaches September 2014

Climate Change - Options for the Kyoto Protocol Compliance System Submission to the Department of Foreign Affairs and Trade - May 2000

Fact sheet: The Kyoto Protocol

UNFCCC/CCNUCC DRAFT. Annex 1

FCCC/TP/2013/5. United Nations. Technical synthesis on the framework for various approaches. Technical paper. Summary. Distr.: General 22 October 2013

Introducing RCC- Asia Pacific & Climate Neutral Now - online platform for voluntary cancellation of CERs

DRAFT REGULATIONS: CARBON OFFSETS. 20 June 2016

ESTRO PRIVACY AND DATA SECURITY NOTICE

COMMISSION STAFF WORKING DOCUMENT. Elements of the Union greenhouse gas inventory system and the Quality Assurance and Control (QA/QC) programme

GUIDELINES FOR USERS OF THE JOINT IMPLEMENTATION PROJECT DESIGN DOCUMENT FORM. Version 04. Revision history of the document

Securing VMware View Communication Channels with SSL Certificates TECHNICAL WHITE PAPER

Structure and template for the Annual Review Reports

Procedure Development, revision and clarification of baseline and monitoring methodologies and methodological tools

Health Identity Programme

Advance unedited version

FINAL. Internal Audit Report. Data Centre Operations and Security

IOD Incorporated. SOC 3 Report for IOD Incorporated

Dubai Financial Services Authority EPRS User Guide v3.docx Page 1 of 42

Integrated Emissions Data Management Framework for Government and Corporate Greenhouse Gas Data Management, Modeling, and Reporting

Addendum. Part Two: Action taken by the Conference of the Parties serving as the meeting of the Parties to the Kyoto Protocol at its first session

This guide provides information to assist clients to use the Australian National Registry of Emissions Units (ANREU) to:

SUBMISSION BY DENMARK AND THE EUROPEAN COMMISSION ON BEHALF OF THE EUROPEAN UNION AND ITS MEMBER STATES

VALIDATION OPINION FOR REVISION OF REGISTERED MONITORING PLAN

NOTIFICATION United Nations Climate Change Negotiations, Barcelona 2 to 6 November 2009

WHITE PAPER. Support for the HIPAA Security Rule RadWhere 3.0

Procedure Terms of reference of the support structure of the CDM Executive Board

OMCL Network of the Council of Europe QUALITY ASSURANCE DOCUMENT

Standard operating procedure

Trading Appendix 1 / Clearing Appendix 1. Definitions. Commodity Derivatives. Issued by NASDAQ OMX Oslo ASA and NASDAQ OMX Stockholm AB

<INSERT PROJECT NAME> DATA MIGRATION CHECKLIST

Why SaaS (Software as a Service) and not COTS (Commercial Off The Shelf software)?

ING Public Key Infrastructure Technical Certificate Policy

White Paper. Support for the HIPAA Security Rule PowerScribe 360

This document and the information contained herein are the property of Bowman Systems L.L.C. and should be considered business sensitive.

BlackBerry Enterprise Server Version: 5.0. Upgrade Planning Guide

Forest Carbon Partnership Facility

Support for the HIPAA Security Rule

TargetingMantra Privacy Policy

Backup Exec Private Cloud Services. Planning and Deployment Guide

Guidelines for Account Management and Effective Usage

National Greenhouse Gas Inventory System in Finland

REQUEST FOR EXPRESSIONS OF INTEREST 4887 EOI NETWORK BACKUP/ ARCHIVING

Electronic business conditions of use

WEST LOTHIAN COUNCIL INFORMATION SECURITY POLICY

Sample Management System For a Network Marketing Scheme

Service Availability Metrics

IBX Business Network Platform Information Security Controls Document Classification [Public]

SAO Remote Access POLICY

Subject: Circular Number: 2011/22 INTERNET SAFETY. Date of Issue: 27 September Governor Awareness: Essential.

SWANcloud. Security Aspects. SSC-Services GmbH Herrenberger Straße Böblingen Deutschland

PRIVACY, SECURITY AND THE VOLLY SERVICE

Report to CAN on the Articles 5, 7 and 8 section of the Marrakech Accords to the Kyoto Protocol

MYACCLAIM PRIVACY POLICY

Designing Database Solutions for Microsoft SQL Server 2012 MOC 20465

APX VCS Registry Operating Procedures. September 2012

Online Backup Management Console 3.8 User Manual

Partnership for Market Readiness PA5 Data Management Systems: Key issues and emerging findings

Section / Nature of Change

PRIVACY POLICY. Last Revised: June 23, About this Privacy Policy.

Database Security. Chapter 21

THE UK GREENHOUSE GAS EMISSIONS TRADING SCHEME 2002

Comparative Cap and Trade Programs: U.S. SO 2 and NO x, EU CO 2

Request for Information (RFI) for Managed Hosting Service

Draft Assembly Resolution text on a Global Market-based Measure (GMBM) Scheme

EUROPEAN COMMISSION HEALTH AND CONSUMERS DIRECTORATE-GENERAL. EudraLex The Rules Governing Medicinal Products in the European Union

MATTERS RELATED TO THE UNITED NATIONS FRAMEWORK CONVENTION ON CLIMATE CHANGE (UNFCCC) AND OTHER INTERNATIONAL BODIES

Appendix 3: CMT Programme Board Highlight Report - Template and Guidance notes

Data Transfer Service A Migration tool to replace current X.400 messaging between NHS workflow applications

SNAP WEBHOST SECURITY POLICY

Xerox SMart esolutions. Security White Paper

National Accounts and Economic Statistics - International Trade Statistics

ISMS Implementation Guide

Swedbank Payment Portal Implementation Overview

White Paper on NETWORK VIRTUALIZATION

Framework 8.1. External Authentication. Reference Manual

DRAFT CONCEPT NOTE ON DATABASE ON THE COST AND EFFICIENCY OF TECHNOLOGIES. (Version 01.0)

APPENDIX G ASP/SaaS SECURITY ASSESSMENT CHECKLIST

DRAFT Standard Statement Encryption

TEMPLE UNIVERSITY POLICIES AND PROCEDURES MANUAL

Using BroadSAFE TM Technology 07/18/05

Credit Unions and The Cloud. By: Chris Sachse

Proposed framework for Securities trading using wireless technology.

Certification Practice Statement

Selecting a Secure Conferencing Solution

TERRITORY RECORDS OFFICE BUSINESS SYSTEMS AND DIGITAL RECORDKEEPING FUNCTIONALITY ASSESSMENT TOOL

Space project management

NOS for Network Support (903)

Transcription:

UNITED NATIONS NATIONS UNIES FRAMEWORK CONVENTION ON CLIMATE CHANGE Secretariat CONVENTION - CADRE SUR LES CHANGEMENTS CLIMATIQUES Secrétariat Independent assessment report of the national registry of the Netherlands Reference Reg_IAR_NL_2007_1 Security classification: Public Version number: v1.0 State: Final Prepared by: Anthony Mak/UNFCCC Date: 19/9/07 Reviewed by: Andrew Howard/UNFCCC Date: 19/9/07 Approved by: Vitaly Matsarski/UNFCCC Date: 19/9/07 Circulation list Name/Role Organization Info/Action RSA National registry of the Netherlands Info Expert Review Team for the Netherlands UNFCCC Action Document change record Version Date Description Affected sections v1.0a 18/9/07 First draft All v1.0 19/9/07 Final Summary Decision This Independent Assessment Report (IAR) has been prepared by the International Transaction Log (ITL) Administrator. This IAR includes the following Addenda: Addendum 1: Initialization 1 Addendum 2: Glossary Reg_IAR_NL_2007_1, version 1.0 Summary, page 1

UNITED NATIONS NATIONS UNIES FRAMEWORK CONVENTION ON CLIMATE CHANGE Secretariat CONVENTION - CADRE SUR LES CHANGEMENTS CLIMATIQUES Secrétariat IAR SUMMARY Registry Name National registry of the Netherlands General information Overall Registry Assessment Date of report 19/9/07 IAR Type Standard IAR Components Initialization Required Reporting period Initial IAR Operational Performance Required Registry URL http://www.emissieautoriteit.nl/english http://www.emissieautoriteit.nl/english/co2-emissions-trading-registry/login Consolidated system with Yes other Parties? Conclusion No Parties involved Public Availability of Information Required The registry has fulfilled all of its obligations regarding conformity with the Data Exchange Standards. These obligations include having adequate transaction procedures; adequate security measures to prevent and resolve unauthorized manipulations; and adequate measures for data storage and registry recovery. The registry is therefore deemed fully compliant with the registry requirements defined in decisions 13/CMP.1 and 5/CMP.1, noting that registries do not have obligations regarding Operational Performance or Public Availability of Information prior to the operational phase. Conclusion Initializations during reporting period 1 2 3 Initialization Initialization status Start Date 27/3/07 End Date 9/8/07 Operational Performance Conclusion Conclusion Complete Incomplete No data Public Availability of Information Main Web Address Date last accessed Reg_IAR_NL_2007_1, version 1.0 Summary, page 2

UNITED NATIONS NATIONS UNIES FRAMEWORK CONVENTION ON CLIMATE CHANGE Secretariat CONVENTION - CADRE SUR LES CHANGEMENTS CLIMATIQUES Secrétariat RSA Consultation on Draft IAR Date of Review 19/09/07 Author Marc Allessie Final Comments None Position Director Dutch Emissions Authority Reg_IAR_NL_2007_1, version 1.0 Summary, page 3

Independent Assessment Report of the national registry of the Netherlands Addendum 1 Initialization 1 Registry Name National registry of the Netherlands Date of report 19/9/07 Reporting Period Start Date 27/3/07 End Date 9/8/07 Reg_IAR_NL_2007_1, version 1.0 Addendum 1, page 1

1 Documentation Evaluation This evaluation was carried out by the ITL Operator under the initialization process and aggregated results have been transcribed here in full. Status Green Amber Red Total Score (max. 100) 87% The scoring approach used to evaluate the registry documentation is to assess the confidence level associated with each document, based on quality (completeness / accuracy / consistency of information supplied) and evidence (actual results supporting information supplied, if appropriate). The approach is set out below (see the ITL Initialization Process documentation for further information). Status Description Score Green No significant concerns about the state of registry readiness are identified. > 80 Amber Minor limitations in the state of registry readiness are identified. 50-80 Red Significant concerns about the state of registry readiness are identified. < 50 Reg_IAR_NL_2007_1, version 1.0 Addendum 1, page 2

Ref. Test Description Quality Evidence Confidence 1 1.1 Database and Application Backup Detailed plan describing backup procedures for the production 95% 100% 97% database and software. 1.2 Disaster Recovery Plan Plan designed to enable Registry to survive in the event of catastrophic failure or disruption of the host 95% 78% 90% environment and to re-establish normal business operations as quickly as possible. 1.3 Security Plan Plan defined in order to protect the application and data from unrestricted 100% 78% 93% and unsolicited use. 1.4 Application Logging Documentation Documentation describing registry capability to maintain database logs and activity logs, provided to 89% 76% 80% demonstrate conformance with Section 7 of the Data Exchange Standards. 1.5 Time Validation Plan Specific procedures for validating server time on a periodic basis to 95% 100% 97% allow successful data exchange. 1.6 Version Change Management Procedure providing a clear migration path to upgrade from version to 90% 89% 90% version of registry software and database schemas. 1.7 Test Plan Plan ensuring a registry has performed basic testing and is capable of participating in the tests outlined in Annex H of the DES, which 86% 78% 83% are required of a registry prior to being authorized to submit production transactions to the ITL. 1.8 Test Report Report providing evidence that a registry has performed basic testing and is capable of participating in the tests outlined in Annex H of the DES, 78% 71% 73% which are required of a registry prior to being authorized to submit production transactions to the ITL. 1.9 Operational Plan Plan ensuring that the Registry has appropriately planned and staffed their operational requirements, so that the initial standards and requirements will be addressed on an ongoing basis. 82% 90% 85% 1 Figures in this column were calculated using weighted averages for quality and evidence. Reg_IAR_NL_2007_1, version 1.0 Addendum 1, page 3

2 Connectivity Evaluation This evaluation was carried out by the ITL Operator under the initialization process and the results have been transcribed here in full. Status Ref. Test Description 2.1 Establish VPN connectivity between registry and ITL 2.2 Establish SSL connection 2.3 Establish basic Web service communication Reg_IAR_NL_2007_1, version 1.0 Addendum 1, page 4

3 Interoperability Evaluation This evaluation was carried out by the ITL Operator under the initialization process and aggregated results have been transcribed here in full. In the below table, Reference 5 applies only to EU ETS member registries, and Reference 6 applies only to the CDM registry. Status Ref. Test Description 3. Discrete Transaction Tests 3.1 Issuance 3.2 Conversion 3.3 External Transfer 3.4 Cancellation 3.5 Retirement 3.6 Replacement 3.7 Carry-over 3.8 Expiry Date Change 4. Test Cases (National Registry) 4.1 Issuance Transaction Tests 4.2 Conversion Transaction Tests 4.3 External Transfer Transaction Tests 4.4 Cancellation Transaction Tests 4.5 Expiry Date Change Transaction Tests 4.6 Retirement Transaction Tests 4.7 Replacement Transaction Tests 4.8 Carry-Over Transaction Tests 5. EU ETS Member Registry Test Cases 5.1 Account Management Web Services 5.2 Internal Transfer Transaction Tests 6. Test Cases (CDM Registry) 6.1 Issuance Transaction Tests 6.2 Internal Transfer Transaction Tests 6.3 External Transfer Transaction Tests 6.4 Cancellation Transaction Tests 6.5 Expiry Date Change Transaction Tests 6.6 Additional Tests Reg_IAR_NL_2007_1, version 1.0 Addendum 1, page 5

4 Initialization Recommendation (by ITL Operator) Recommendation Yes No Comments 5 Initialization Authorisation (by ITL Administrator) Authorization Yes No Comments Reg_IAR_NL_2007_1, version 1.0 Addendum 1, page 6

Independent Assessment Report of the national registry of the Netherlands Addendum 2 Glossary GLOSSARY TERM Annex H of the DES CDM Registry CITL Connectivity Evaluation Consolidated Systems DES Document Evaluation ERT Final Comments IAR Initial IAR Initialization International Transaction Log (ITL) ITL Administrator ITL Operator National Registry Operational Performance Reporting Period RSA SEF SSL Standard IAR Supplementary Transaction Log (STL) DEFINITION The annex of the DES defining the initialization tests that a registry must pass as part of the initialization process The registry established by the Executive Board of the Clean Development Mechanism and implemented by the UNFCCC secretariat Community Independent Transaction Log. The STL operated by the European Commission for the European Union Emissions Trading Scheme Part of the initialization process that tests whether a registry can connect successfully with the ITL Registry systems which share system infrastructure Data Exchange Standards Part of the initialization process that assesses the documentation submitted to the ITL Administrator Expert Review Team under Article 8 of the Kyoto Protocol The final comments made by a RSA on the draft IAR after having received responses from the ITL Administrator on earlier comments Independent Assessment Report The first IAR carried out for a registry when it initialises for the first time. Subsequent initializations are reported in Standard IARs. The process by which a registry is formally tested by the ITL Administrator for conformity with the DES The system established under the Kyoto Protocol to monitor the validity of transactions between Parties. It is implemented by the UNFCCC secretariat The Administrator of the ITL. It is a role assigned to the UNFCCC secretariat The service provider that operates the ITL on behalf of the ITL Administrator Not Applicable A registry established by an Annex I Party The performance of a registry during its operation The period of time covered by an IAR Registry System Administrator Standard Electronic Format, defined for the reporting by Annex B Parties to the Kyoto Protocol of their assigned amount holdings and transactions Secure Socket Layer. A standard used to establish encrypted communications All IARs subsequent to a successful Initial IAR An electronic database established for a Supplementary Trading Programme to monitor the validity of transactions between registries under that programme Reg_IAR_NL_2007_1, version 1.0 Addendum 2, page 1