Electronic transactions allow for more efficient business interaction, promoting economic growth and attractiveness. However, lack of trust in electronic transactions is a major set-back for businesses and individuals having the intention to perform online business. Building this trust is thus of major importance to drive economic growth, especially in the digital sector
The Communications Regulatory Authority has established the national trust services framework. This framework has the purpose to provide a secure, attractive, and regulated framework for the provision of trust services and is aimed at the international and mutual recognition of such trust services.
The CRA has been designated as the national supervisory body, in accordance with Article 33 of the Regulation for Certification Service Providers. Its role is in particular to check that trust service providers and the trust services they provide meet the requirements of the regulation.
The regulation gives CRA the responsibilities to:
The trust service framework can be encapsulated as a pyramid of trust, as illustrated in the below figure. This figure showcases the various layers within the framework and illustrates their interconnected relationships.
Through the licensing and supervisory activities undertaken prior to obtaining authorization (ex ante) and those implemented after authorization (ex post), the regulation establishes a supervisory framework around security requirements and obligations for (Q)TSP/(Q)TS. This framework's primary goal is to guarantee that, from licensing to termination, the (Q)TSPs and the (Q)TSs they offer consistently comply with the mandates set out in the Laws.
According to Article 33 paragraph (1) of the Regulation, CRA must establish, maintain, and publish the Qatar trusted list which includes information on trust service and qualified trust service.
Only granted qualified trust service provider can voluntarily use the Qatar trust mark.