This is an overview of the policies that have been completed.  Policies that have been voted by the policy email discussion group migrate to POLICY status as shown on the [[http://www.cacert.org/policy/|main website]].  This page is part of the overall [[Policy]] family and describes the work of PoP [[http://www.cacert.org/policy/PolicyOnPolicy.php|Policy on Policies]].

== Completed Policies ==

Policies with POLICY status are these:

 * [[http://www.cacert.org/policy/AssurancePolicy.php|Assurance Policy]] is for assurance of ordinary users.
 * CCA [[http://www.cacert.org/policy/CAcertCommunityAgreement.php|CAcert Community Agreement]] (COD9)
  * The membership agreement includes a License to use, to rely on, and distribute the issued certificates. There is no charge. The Member takes part in the CAcert Community and adheres to its rules and principles. The private keys will be securely maintained by the user.
  * Agreed by signature on CAcert Assurance Programme (CAP) form (pending: online system - new account, cert issuance).
  * CCA is introduced and accepted as DRAFT in 19 September 2007. It went to POLICY status on 9th of January 2008.
 * PoP [[http://www.cacert.org/policy/PolicyOnPolicy.php|Policy on Policies]] (COD1)
  * The policy for dealing and managing all policies documents within CAcert.
  * PoP is introduced and accepted in 18 September 2007. It went to POLICY status on 4th of Febr 2008.
 * DRP [[http://www.cacert.org/policy/DisputeResolutionPolicy.php|Dispute Resolution Policy]] (COD7)
  * The policy describes how is dealt with disputes (CAcert internal arbitration). Maximal fine is 1000 US$. Jurisdiction is NSW of Australia.
  * DRP is introduced and accepted as POLICY in 19 September 2007.
 * OAP [[http://www.cacert.org/policy/OrganisationAssurancePolicy.php|Organisation Assurance Policy]] (COD11)
  * The policy describes the Organisation Assurance process, needed steps and signed statements to verify an organisation. and Organisation Assurance help provision.
  * The policy was initiated and accepted 18th of September 2007.
  * There was some question as to whether it was DRAFT as of that date or not;  either way, PoP says the maximum time in DRAFT is one year, so it is in POLICY now.
  * the OAP is now ''up for review'' and listed on the [[Brain/PoliciesAndSignificantTechnicalStandards/PolicyDRAFT|work page]], according to [[PolicyDrafts/OrganisationAssurance]], as the OA area has exposed many weaknesses.

== Other Important Policy Work / Exceptions  ==
In general, work done is located on the policy [[Brain/PoliciesAndSignificantTechnicalStandards/PolicyDRAFT|work page]].  Each of these is listed there:
 * CPS [[http://www.cacert.org/policy/CertificationPracticeStatement.php|Certification Practice Statement]] is the "CPS" or the technical bible of a CA.
   * as an exception, this document is already on the main website, so as to replace an earlier very old document.
   * It still requires some attention, and will need to be voted to POLICY at some point.
 * CCS [[https://svn.cacert.org/CAcert/Policies/ConfigurationControlSpecification.html| Configuration-Control Specification]] is the "index" for Audit.
   * As it controls all documents, it is the document that controls and mandates PoP.
   * It is DRAFT!

== Deprecated ==

A number of significant documents that have done their job and are now retired:

 * NRP's old --(D a L)-- (was COD7)
  * Was withdrawn and replaced with a combination of [[http://www.cacert.org/policy/RootDistributionLicense.php|RDL]] and [[http://www.cacert.org/policy/CAcertCommunityAgreement.php|CCA]] definitions of [[USE]].
  * Was first introduced on 19 September 2007 and withdrawn as of [[PolicyDecisions#p20100710|p20100710]].