Feat/add scs 0007 (#946)

* a very very rough draft
* reword
* who attestates
* start rewording. define what is meant with "SCS-compliant"
* follow the naming scheme for the other certifications
* wording - especially making clear that abstentions are not counted as votes against.
* eligible, not eligble
* Implementation notes for scs-0007 (#964): How to handle conflict of interests in these exception votes.
* make adjustments and add note on re-certification

---------

Signed-off-by: Kurt Garloff <[email protected]>
Signed-off-by: Marvin Frommhold <[email protected]>
Co-authored-by: Marvin Frommhold <[email protected]>

* make editorial adjustments

Signed-off-by: Marvin Frommhold <[email protected]>

* fix supplements reference

Co-authored-by: Kurt Garloff <[email protected]>
Signed-off-by: Marvin Frommhold <[email protected]>

* improve wording

Co-authored-by: Kurt Garloff <[email protected]>
Signed-off-by: Marvin Frommhold <[email protected]>

---------

Signed-off-by: Felix Kronlage-Dammers <[email protected]>
Signed-off-by: Kurt Garloff <[email protected]>
Signed-off-by: Marvin Frommhold <[email protected]>
Co-authored-by: Matthias Büchse <[email protected]>
Co-authored-by: Jan Schoone <[email protected]>
Co-authored-by: Marvin Frommhold <[email protected]>
Co-authored-by: Kurt Garloff <[email protected]>

Author: 5 people

Standards/scs-0007-v1-certification-integrators.md

@@ -0,0 +1,55 @@
+---
+title: Certification of integrators
+type: Procedural
+status: Draft
+track: Global
+description: |
+  SCS-0007 defines the process and rules on how SCS integrators are certified.
+---
+
+## Introduction
+
+The purpose of this document is to describe a concept for how implementation partners can obtain certification as SCS integrators. In essence, this certificate is intended to express that an organization has sufficient technical knowledge and experience to provide technical support to companies using SCS.
+For this purpose, two essential criteria are defined that must be fulfilled. In addition, there are a few other criteria that can be taken into account in favor of certification.
+
+## Motivation
+
+## Regulations
+
+The certificates are awarded for the period of one year.
+The certification is done either by the Forum SCS-Standards or an attestation body nominated by the forum.
+
+### Certificates
+
+- Certified SCS KaaS Integrator: SCS KaaS (Kubernetes as a Service) implementation partner
+- Certified SCS IaaS Integrator: SCS IaaS (Infrastructure as a Service) implementation partner
+
+### Criteria
+
+Criteria for certification, proof of experience in setting up, operating and supporting SCS-compliant environments:
+
+The organization to be certified needs to satisfy one of the following requirements
+
+a) have successfully brought at least two SCS-compliant environments of a third party (customer) into production in the last 12 months. The two environments must fulfill at least the [_Certified SCS-compatible IaaS_](https://docs.scs.community/standards/scs-compatible-iaas) or [_Certified SCS-compatible KaaS_](https://docs.scs.community/standards/scs-compatible-kaas) scope.
+
+or
+
+b) actively manage at least two such environments of third parties (customers) at the time the certificate is issued. These environments must have been managed at least for a year at the time of attestation.
+
+or
+
+c) have been operating a _Certified SCS-compatible IaaS_ public cloud with at least two regions or at least three availability zones for more than one year.
+
+#### Additional favorable criteria for certification
+
+SCS is an open source community project with the goal of enabling digital sovereignty. As such, the commitment and support of this mission should be recognized and promoted beyond technical competence. To this end, the following aspects can be taken into account for certification or compensate for any criteria that are not fully met (see above):
+
+The implementation partners should work towards ensuring that digital sovereignty is implemented in accordance with the SCS definition (Standards, Open Software, OpenOperations). This is expressed in a way that, in addition to the technology used to build environments (not necessarily only SCS environments), knowledge and experience in SCS standards compliance (SCS-compatible IaaS and KaaS) is also available and that environments built by this organization have already been configured in accordance with the standards and are listed on the SCS compliance list.
+
+The implementation partners should work towards ensuring that the cloud environments they set up and/or manage are also officially visible as SCS clouds, thereby strengthening the SCS brand.
+
+### Attestation
+
+The audit for the certification of an implementation partner is carried out by a person appointed by the Forum SCS-Standards. The person will assess and, if necessary, obtain evidence from the organization to be certified as to whether and to what extent the criteria have been met.
+
+If one of the above criteria is not met, the forum can be requested to certify the candidate nevertheless. This must be decided by unanimous vote in the forum, two third of all eligible votes must be present. Abstentions are not counted as votes against.

Standards/scs-0007-w1-certification-integrators-implementation-notes.md

@@ -0,0 +1,37 @@
+---
+title: "Implementation hints for achieving Certified SCS Integrator"
+type: Supplement
+track: Global
+status: Draft
+supplements:
+  - scs-0007-v1-certification-integrators.md
+---
+
+## Introduction
+
+The standard scs-0007 documents what requirements integration partners must fulfill to be eligible
+for being certified as SCS Integrators.
+This document contains hints how these requirements may be evaluated by the Forum SCS-Standards
+auditor and how exceptions will be handled.
+
+### Voting on exceptions
+
+When someone requests approval for a certified SCS integrator that does not meet all requirements,
+this can be waived with a qualified vote in the Forum SCS-Standards.
+To avoid conflict of interests and social pressure clouding this exception, we envision the
+following process:
+
+- The beneficiary party (the integrator in whose favor the exception is requested) should be
+  invited to a meeting to explain why they believe that they qualify as a certified SCS
+  integrator despite not meeting the normal qualification criteria.
+- The forum members may ask the beneficiary clarifying questions that should be answered.
+- To ensure an open discussion, the beneficiary should be excluded from the discussions about
+  the matter. The same applies if the beneficiary party is a member of the Forum
+  SCS-Standards. In that case, the expulsion should not be counted against the required quorum
+  to avoid forum members from having a disadvantage. If the excluded party is a voting member,
+  they will automatically abstain from the vote.
+- Any parties that have significant conflicts of interests are expected to make these
+  conflicts transparent and cast abstention votes.
+
+By the time of re-certification, all exceptions from a previous certification should have been
+eliminated.