You can own and operate a Digi-CA™ system without ever putting in place any statutory documents or standards compliance and many organizations because their application is commercial and doesn’t need third part accreditation. ‘Best Practice’ means you should consider having a Certificate Policy and we would recommend the following: