IDESG Self-Assessment and Attestation Program Proposed Workflow Discussion Deck

1. IDESG Self-Assessment and Attestation Program Proposed Workflow Discussion Deck TFTM Committee 07/16/2014

2. Purpose The purpose of this presentation is to: • Provide an overview of the proposed workflow for the IDESG Self-Assessment and Attestation process. • This overview is intended to show the processes for the IDESG and applicants and the documents required for the program. • IDESG entities responsible for processes are proposed. • Timeframes for IDESG processing are proposed.

3. Application, Self-Assessment and AttestationWorkflow and Approval Process Overview 15 Days 15 Days Yes Applicant IDESG Secretariat Approved Applicant IDESG Secretariat Approve? Complete? No No Yes Assessment & Attestation Pkg. Application & Bona Fides Pkg. Application Denial Application Approval Pkg. 30 Days IDESG Conformance Recognition Process (TBD) Yes IDESG CRT Approve? No Return Pkg. to Applicant

4. Workflow: Application Process 15 Days IDESG Secretariat Approved Applicant Applicant Organization Approve? Yes No Application & Bona Fides Pkg. Application Approval Pkg. Application Denial • Proposed Process • IDESG Secretariat posts standard application package on IDESG SAAP site for download and/or web form completion • Applicant organization completes and submits application package (includes bona fides information) • IDESG Secretariat serves as registrar to record all submissions and provide acknowledgement to applicant • IDESG Secretariat reviews application package for completeness and appropriateness • IDESG Secretariat validates bona fides information. • IDESG approves or denies application package within 15 days and issues Application Approval package or Application Denial to Applicant Organization • Note: incomplete application packages can be handled informally between Secretariat and applicant organization for resubmission. Resubmission restarts 15 day processing window. • IDESG Documents/Artifacts Needed • Application and Bona Fides Package • Applicant Approval Package – Self Assessment Criteria/Questionnaire, Attestation Template, instructions • IDESG internal instructions for review of Application Package and validation of bona fides information • Application denial template and established process for addressing denial appeals.

5. Workflow: Self-Assessment and Attestation Submission Process IDESG Secretariat 15 Days Approved Applicant Organization IDESG Conformance Review Team Complete? Yes No Assessment & Attestation Pkg. • Proposed Process • Approved Applicant Organization completes and submits Self-Assessment and Attestation Package to IDESG Secretariat • IDESG Secretariat serves as registrar to record all submissions and provide acknowledgement to applicant • IDESG Secretariat reviews Self-Assessment and Attestation Package for completeness and appropriateness • Note: incomplete Self-Assessment and Attestation Packages can be handled informally between Secretariat and applicant organization for resubmission. Resubmission restarts 15 day processing window. • IDESG Secretariat provides complete package to IDESG Conformance Review Team • IDESG Documents/Artifacts Needed • Conformance Review Team charter.

6. Workflow: Self-Assessment and Attestation Review and Approval Process 30 Days IDESG Conformance Review Team IDESG Conformance Recognition Process (TBD) Yes Approve? No Assessment & Attestation Pkg. Return Pkg. to Applicant • Proposed Process • IDESG Conformance Review Team completes review of Self-Assessment and Attestation Package within 30-day window. • Approved Self-Assessment and Attestation Packages are moved to the (TBD) IDESG Conformance Recognition Process. • Denied Self-Assessment and Attestation Packages (TBD) are returned to Applicant organization for resubmission. • IDESG Documents/Artifacts Needed • Conformance Review Team review and approval instructions. • IDESG Conformance Recognition Process description (TBD).