Be back from the ATE-Flensburg event i've read today my outstanding mails
and found following mail ....which I would like to bring to your attention
Date: Fri, 12 Jun 2009 17:47:25 +0200
From: "Ian G (Audit)" <iang@...>
To: CAcert Board <cacert-board@...>
Subject: resignation as Auditor
this is my letter of resignation as Auditor for the CAcert systems audit.
My reason for resigning are that the managment support needed to carry
on the audit is not present. In support of this I quote:
1. delays in documentation and systems. Although it is reasonable to
accept some delays, there is a limit. We are at 9 months, and 12 months
is likely before seeing the next phase complete.
2. lack of management input. There are typically several pending posts
to board list with little or no response from the board.
3. unhealthy focus on personalities which distracts from focussing on
the problems that need fixing.
4. finances. The concept of a fixed-price audit does not make sense
when long delays are present. Yet, my attempts to negotiate changes to
the MoU structure were rejected.
5. too much done outside management's vision. An example would be the
CCA and Assurer Policy rollouts, done almost entirely by people in the
Community. In contrast, the board expresses surprise when old Assurers
are turned off.
It makes little sense to quibble about any particular thing, such as
today's decision by the board not to support an increase in finances for
the audit project. This is just one signal amongst many.
The audit is getting tougher, not easier. Systems review was turning up
serious issues that will need attention, which is basically not
available. Software is another major concern.
It is therefore my judgement that CAcert needs to take pause and figure
out how to properly bring the assets to bear to solve the real issues.
The community is not served by continuing along this slow path.
regards, uli ;-&