Who is responsible for producing an Assurance Maintenance Plan?
The CTAS evaluation company is responsible for ensuring that an Assurance Maintenance Plan has been produced but who actually produces it is not important. The Assurance Maintenance Plan could in fact be written by the Customer, Sponsor, CTAS evaluation company, CLAS Consultant, CLEF or by another party. The Plan is normally produced during the initial evaluation and should be agreed by key stakeholders (including Accreditor and CESG) before the Maintenance Phase begins. It is then subject to periodic review.
