Hosting Certification steps
1. Register Interest
Thank you for your interest in being certified under the Hosting Certification Framework.
Next step – The Certifying Authority will confirm your registration and issue a Hosting Certification Assessment Pack to be completed.
2. What is in the Assessment Pack?
The Hosting Certification Assessment Pack includes:
- Deed of Certification
- Service Provider Declaration
- Non-Disclosure Agreement
- Control Objectives.
The Deed of Certification is an agreement made between the Certifying Authority and a Service Provider. It sets out the contractual terms and conditions to obtain Certification for the services a Service Provider wishes to offer to a government customer.
You will receive a copy of the Hosting Certification Assessment Pack after registration is complete. You must fill-in, sign and return all documents to certifications@dta.gov.au to progress to the formal assessment stage.
3. How does the formal assessment process work?
The formal assessment will be conducted by the Certifying Authority or an authorised assessment team and may take on average 3 to 6 months to complete.
Applicants will receive an outcome notification via email once the assessment is complete.
Certification
Where an applicant and their nominated service(s) successfully meets all the requirements of the Hosting Certification Framework, a Certificate of Hosting Certification will be issued. The Certificate is an official document that demonstrates to government customers that a supplier’s service has been certified under the Hosting Certification Framework.
Certificates are accompanied with the corresponding unique Certification IDs for each nominated service that has achieved Certification. The Certification IDs assist a government customer to verify the service is certified and to what level (Assured or Strategic).
4. Outcome notification
Certified applicants
Upon achieving Certification, the Certifying Authority will notify the applicant via email and issue a Certificate of Hosting Certification. The Certificate will include the corresponding unique Certification ID for each nominated service that achieved Certification.
The unique ID verifies that a Service Provider has undertaken the formal Certification Assessment and a specific service has been certified in accordance with the Hosting Certification Framework. Service Providers responding to Australian Government hosting-related procurement request(s) should include the applicable ID (Provisional ID or Certification ID) of the service(s) being sought.
All Certified Service Providers are listed here.
Uncertified/unsuccessful applicants
Applicants who undergo the Full Certification Assessment process but are not successful in meeting the Hosting Certification Framework requirements to achieve Certification will be deemed Uncertified and notified via email.
Any Provisional Certification IDs correlating with the Assessment will be deactivated from the date of notification and the relevant government customer(s) will be notified.
Unsuccessful applicants will not be publicly announced.
5. Keeping your Certification up to date
To maintain Certification, Service Providers are obliged to meet ongoing disclosure requirements, including:
- Reporting any potential or upcoming Relevant Change that may adversely affect the Commonwealth. A Relevant Change includes:
- a change in board, management team, personnel or subcontractors
- a change in strategic direction, ownership or operations
- a change in security measures or procedures
- a sale or disposal of Australian land
- any transfers, assignments or disposals of any lease or real-estate
- any other circumstance that may adversely affect security or operations.
- A biannual Service Provider Contract Form outlining the contracts held with Australian Government entities for the supply of certified services.
- An annual Certification Review.