大規模廢止計畫

Mass Revocation Plans

CA organizations MUST have a mass revocation plan, and as of 2025-12-01, they SHALL assert in section 5.7.1 of their CPS or combined CP/CPS that they maintain a comprehensive and actionable plan for mass revocation events, that they perform annual testing of the mass revocation plan, and that they incorporate lessons learned into such plan in order to continually improve their preparedness for mass revocation events over time.

各憑證機構應（MUST）具備大規模廢止計畫，且自 2025-12-01 起，應（SHALL）於其憑證實務作業基準（CPS）或合併式 CP/CPS 的第 5.7.1 節中聲明，其已建立並持續維護一套針對大規模廢止事件之完整且可執行的計畫，並每年對該大規模廢止計畫進行演練，將演練所得之經驗教訓回饋至該計畫，以持續提升其應對大規模廢止事件之整備能力。

The CA’s mass revocation plan MUST include clearly defined, actionable, and comprehensive procedures designed to ensure rapid, consistent, and reliable response to large-scale certificate revocation scenarios. The CA is not required to publicly disclose its mass revocation plan or procedures but MUST make them available to its auditors upon request. The CA SHALL annually test, review, and update its plan and such procedures. The CA’s mass revocation plan MAY be integrated into the CA’s incident response, business continuity, disaster recovery, or other similar plans or procedures, provided that provisions governing mass revocation events remain clearly identifiable and satisfy these requirements.

憑證機構（Certification Authority，CA）的大規模廢止計畫應（MUST）包括明確界定、可執行且完整之程序，以確保大規模憑證廢止的情境下，能做出迅速、一致且可靠之回應。CA 無須對外公開其大規模廢止計畫或程序，但應（MUST）於其稽核人員要求時，提供該等計畫及程序供查核。CA 應（SHALL）每年測試、審查及更新其計畫及該等程序。CA 的大規模廢止計畫得（MAY）整合至 CA 的事故應變計畫、業務持續性計畫、災變復原計畫或其他類似計畫或程序中，前提是大規模廢止事件之應變條款仍應清楚可識別，且符合本節要求規定。

Mass revocation provisions MUST include:

大規模廢止事件應變條款應（MUST）包括：

1. Activation criteria - specific, objective, and measurable thresholds at which the mass revocation plan is triggered based on the CA’s risk profile, issuance volumes, and operational capabilities;

1. 啟動要件——根據 CA 的風險剖繪（risk profile）、簽發量及營運能力，設定啟動大規模廢止計畫之具體、客觀且可衡量的門檻條件；

2. Customer contact information - how subscriber and customer contact details are stored, maintained, and kept up to date;

2. 客戶聯絡資訊——用戶與客戶的詳細聯絡資訊之儲存、維護及更新方式；

3. Automation points - processes that are automated or could be automated, and those processes that require manual intervention;

3. 自動化環節——已自動化或可自動化之流程，以及需人工介入之流程；

4. Targets and timelines - for incident triage, revocation initiation, certificate replacement, and post-event review;

4. 目標與時程——事故研判（incident triage）、發起憑證廢止、憑證更換及事後審查之目標與時程；

5. Subscriber notification methods - mechanisms for notifying impacted Subscribers;

5. 用戶通知方式——通知受影響用戶之機制；

6. Role assignments - roles and responsibilities of personnel responsible for initiating, coordinating, and executing the plan;

6. 角色指派——負責發起、協調及執行大規模廢止計畫的人員之角色與職責；

7. Training and education - training, awareness, and readiness activities for personnel responsible for, or supporting, the plan;

7. 訓練與教育——大規模廢止計畫的負責人員或支援人員之訓練、認知及整備活動；

8. Plan testing - annual operational testing to assess readiness and demonstrate implementation feasibility, using one or more of tabletop exercises, simulations, parallel testing, or controlled test environments that DO NOT involve the revocation of active Subscriber Certificates; and

8. 計畫演練——每年進行一次實作演練，以評估整備能力並驗證實施可行性，採用下列一種或多種方式：桌上演練（tabletop exercises）、模擬演練、平行演練，或不涉及廢止有效用戶憑證之受控測試環境演練；以及

9. Post-test analysis and update schedule - how lessons learned from testing or live incidents are incorporated into the plan, and how often it is reviewed and updated.

9. 演練後分析與更新時程——如何將演練或實際發生事故所得之經驗教訓回饋至計畫，以及計畫的審查與更新頻率。