Aleksandra: Thank you for the update.
Unless I'm mistaken, the period of time from 2019-03-08 to today, 2019-07-17, is over 4 months. The Baseline Requirements, Section 8.6, notes that
> the CA SHOUL make its Audit Report publicly available no later than three months after the end of the audit period. In the event of a delay greater than three months, and if so requested by an Application Software Supplier, the CA SHALL provide an explanatory letter signed by the Qualified Auditor.
Please consider this a formal request for such an explanatory letter, signed by E&Y Poland, that explains the reasoning for the delays. Similarly, please inform E&Y Poland about this bug, so that they may also communicate on or engage with this bug. Auditors that have demonstrated patterns of delays in producing reports have had their own issues opened against them, so it is very important for us to understand the nature and cause of the delay, and the steps that both Asseco/Certum and E&Y Poland are taking to ensure that future reports are not delayed.
Bug 1566586 Comment 2 Edit History
Note: The actual edited comment in the bug view page will always show the original commenter’s name and original timestamp.
Aleksandra: Thank you for the update.
Unless I'm mistaken, the period of time from 2019-03-08 to today, 2019-07-17, is over 4 months. The Baseline Requirements, Section 8.6, notes that
> the CA SHOULD make its Audit Report publicly available no later than three months after the end of the audit period. In the event of a delay greater than three months, and if so requested by an Application Software Supplier, the CA SHALL provide an explanatory letter signed by the Qualified Auditor.
Please consider this a formal request for such an explanatory letter, signed by E&Y Poland, that explains the reasoning for the delays. Similarly, please inform E&Y Poland about this bug, so that they may also communicate on or engage with this bug. Auditors that have demonstrated patterns of delays in producing reports have had their own issues opened against them, so it is very important for us to understand the nature and cause of the delay, and the steps that both Asseco/Certum and E&Y Poland are taking to ensure that future reports are not delayed.