1458042 - ACCV: Missing BR Self Assessment

Status: RESOLVED FIXED

(CA Program :: CA Certificate Compliance, task)

Description

[Wayne Thayer]

Action 5 of Mozilla's 2-17 CA Communication required CAs to perform a BR Self Assessment by January 31, 2018. ACCV responded:

Our deadline to complete and send BR Self Assessment is February 28, 2018  

The deadline for completing the BR Self Assessment was extended to April 15 in the January 2018 CA Communication, and ACCV responded:

We previously requested an extension and intend to deliver our BR Self Assessment prior to 15-April 2018. 

No BR Self Assessment has been received from ACCV.

Please respond with the following:
1. A date in the near future when Mozilla will receive ACCV's BR Self Assessment.
2. An explanation of why the deadline was missed and why Mozilla wasn't notified.
3. An explanation of the steps that have been or will be taken to prevent an issue of this sort from happening again in the future.

Comment 1

[Wayne Thayer]

Attachment: CA's BR Self Assessment_ACCVv1.pdf

ACCV delivered their BR Self-Assessment on 14-May.

José: please answer to question #3 above.

Comment 2

[Jose Amador]

First of all, we are very sorry for the delay and, although it is not an excuse, several factors were combined that should only happen once:

- We had to translate and adapt part of the CPS and Policies. That part is already done and there will only be minor adaptations.
- We were not used to conducting the audit independently, so we have needed to familiarize ourselves with the process and consult doubts and questions to the auditors who usually carry out this work. This has taken us more time than estimated and our staff has been trained in these tasks, so that it can be done quickly and efficiently.
These additional training tasks should only be necessary once. Now it will only be necessary to refresh and update the training where appropriate.
- We have had staff shortages for additional workloads that have been resolved.

We are at your disposal to help with any clarification

Best regards

José Antonio