Disclosure Records of Recognized Certification Authorities

Disclosure Record for the Postmaster General

(This is page 24 of the disclosure record for the Postmaster General maintained by the Government Chief Information Officer ("GCIO") under section 31(1) of the Electronic Transactions Ordinance (Cap. 553) ("ETO"). Click this link to go back to page 1 of the disclosure record.)

Assessment Report and Statutory Declaration (1 January 2014 - 31 December 2014)

In accordance with section 43(3) of the ETO, the GCIO must publish in the disclosure record for the Postmaster General as a recognized certification authority the dates of and the material information in the assessment report and statutory declaration on the certification authority ("CA") services of the Postmaster General. Only those parts of the report and statutory declaration containing material information are herewith published.

The Postmaster General is hereinafter referred to as the "Hongkong Post CA".

Assessment Report

A. Date of the Report

• The date of the report is 20 January 2015.

B. Material Information

1. The assessment report was prepared by the assessor for the period between 1 January 2014 and 31 December 2014.

Recognized CA Practices

2. In the assessor's opinion, in all material respects:
   1. the management assertions in respect of Hongkong Post CA's compliance with the sections of the Code of Practice (Note 1) set out in Part 3A of Appendix 3 to Practice Note 870 (Note 2) for the period from 1 January 2014 to 31 December 2014 are reasonable. In particular, Hongkong Post CA has:
      1. disclosed its business practices in its CPSs (Note 3) in accordance with the ETO applicable to a RCA (Note 4) and the Code of Practice and provided its services in accordance with its disclosed business practices;
      2. reasonably complied with the requirements in respect of the use of a trustworthy system to support its operations in accordance with section 37 of the ETO and the Code of Practice; and
      3. reasonably complied with the requirements in respect of recognition of its certificates in accordance with the provisions of the ETO applicable to a RCA and the Code of Practice;
   2. no information came to the attention of the assessor during the course of the assessment that would indicate that the management assertions in respect of Hongkong Post CA's compliance with the sections of the Code of Practice set out in Part 3B of Appendix 3 to Practice Note 870 for the period from 1 January 2014 to 31 December 2014 are not reasonable; and
   3. based on the conclusions drawn in paragraphs (a) and (b) above, the management assertions in respect of Hongkong Post CA's compliance with the provisions of the ETO applicable to a RCA for the period from 1 January 2014 to 31 December 2014 are reasonable.

Financial projections (Note 5)

3. In the assessor's opinion, in all material respects, the accounting policies upon which Hongkong Post CA's cashflow projections for the two 6-month periods from 1 November 2014 to 31 October 2015, the financial position forecasts as at 30 April 2015 and as at 31 October 2015, and the projection of operating costs for the 90 days from 1 November 2014, in respect of the Hongkong Post CA's operations relevant under the ETO are based, are consistent with those normally adopted by Hongkong Post CA and conform with generally accepted accounting principles adopted in Hong Kong, and the financial projections have been properly compiled on the basis of the assumptions made by the management of Hongkong Post CA.
4. It has been ascertained from Hongkong Post CA that the amount of the net current assets (i.e. current assets less current liabilities) as shown in the unaudited management accounts of Hongkong Post CA as at 31 October 2014 was nil.
5. It has been ascertained from Hongkong Post CA that the 90-day projection of operating costs from 1 November 2014 was nil, after net-off against relevant government grants.
6. The assessor has not carried out any verification work on the unaudited management accounts of Hongkong Post CA for the period from 1 April 2014 to 31 October 2014 set out in Appendix 3 of the assessment report.

Potential liabilities

7. Given the limited history of past claims in Hong Kong for risks of this nature of which Hongkong Post CA is aware, Hongkong Post CA with Certizen as its agent is unable to estimate the probability of occurrence of potential claims for the next 12 months from 1 November 2014.
8. In the assessor's opinion, in all material respects, the management assertions that Hongkong Post CA with Certizen as its agent has implemented and maintained effective procedures to determine and manage Hongkong Post CA's potential liabilities in relation to the issuance of certificates are reasonable.

Statutory Declaration

A. Date of the Declaration

• The date of the declaration is 16 January 2015.

B. Material Information

• A responsible officer of Hongkong Post CA declares that Hongkong Post CA has, from 1 January 2014 until 31 December 2014, complied with the provisions of the ETO and the provisions of the Code of Practice which have been set out under paragraph 2 of Appendix 2 of the Code of Practice.

Notes

1. Code of Practice for Recognized Certification Authorities issued by the GCIO under section 33 of the ETO.
2. Practice Note 870 "The Assessment of Certification Authorities under the Electronic Transactions Ordinance" issued by the Hong Kong Institute of Certified Public Accountants.
3. Certification practice statements.
4. Recognized certification authority.
5. The financial projection period (i.e. 1 November 2014 and 31 October 2015) for the assessment is specified by Hongkong Post CA following the practices of previous assessments.
6. The above information is disclosed in accordance with section 31(2) of the ETO.