Closed Bug 1458042 Opened 6 years ago Closed 6 years ago

ACCV: Missing BR Self Assessment


(CA Program :: CA Certificate Compliance, task)

Not set


(Not tracked)



(Reporter: wthayer, Assigned: jamador)


(Whiteboard: [ca-compliance] [disclosure-failure])


(1 file)

Action 5 of Mozilla's 2-17 CA Communication required CAs to perform a BR Self Assessment by January 31, 2018. ACCV responded:

Our deadline to complete and send BR Self Assessment is February 28, 2018  

The deadline for completing the BR Self Assessment was extended to April 15 in the January 2018 CA Communication, and ACCV responded:

We previously requested an extension and intend to deliver our BR Self Assessment prior to 15-April 2018. 

No BR Self Assessment has been received from ACCV.

Please respond with the following:
1. A date in the near future when Mozilla will receive ACCV's BR Self Assessment.
2. An explanation of why the deadline was missed and why Mozilla wasn't notified.
3. An explanation of the steps that have been or will be taken to prevent an issue of this sort from happening again in the future.
ACCV delivered their BR Self-Assessment on 14-May.

José: please answer to question #3 above.
Flags: needinfo?(jamador)
First of all, we are very sorry for the delay and, although it is not an excuse, several factors were combined that should only happen once:

- We had to translate and adapt part of the CPS and Policies. That part is already done and there will only be minor adaptations.
- We were not used to conducting the audit independently, so we have needed to familiarize ourselves with the process and consult doubts and questions to the auditors who usually carry out this work. This has taken us more time than estimated and our staff has been trained in these tasks, so that it can be done quickly and efficiently.
These additional training tasks should only be necessary once. Now it will only be necessary to refresh and update the training where appropriate.
- We have had staff shortages for additional workloads that have been resolved.

We are at your disposal to help with any clarification

Best regards

José Antonio
Flags: needinfo?(jamador)
Closed: 6 years ago
Resolution: --- → FIXED
Product: NSS → CA Program
Summary: Government of Spain (ACCV): Missing BR Self Assessment → ACCV: Missing BR Self Assessment
Whiteboard: [ca-compliance] → [ca-compliance] [disclosure-failure]
You need to log in before you can comment on or make changes to this bug.