Open
Bug 2051283
Opened 5 days ago
Updated 5 days ago
ANF AC : Delayed Reporting of 2026 Audit Findings
Categories
(CA Program :: CA Certificate Compliance, task)
CA Program
CA Certificate Compliance
Tracking
(Not tracked)
ASSIGNED
People
(Reporter: pablo, Assigned: pablo)
Details
(Whiteboard: [ca-compliance] [disclosure-failure])
Preliminary Incident Report
Summary
Incident description: ANF AC identified that the audit findings from the 2026 ETSI audit were not reported within the timeframes defined by the CCADB Incident Reporting Guidelines.
The delayed reporting resulted from an incorrect assessment of the reportability of the audit findings. The findings themselves are being addressed in their respective incident reports.
- 2047579 - ANF AC: 2026 Audit Report Finding 1 out of 3
- 2047580 - ANF AC: 2026 Audit Report Finding 2 out of 3
- 2047581 - ANF AC: 2026 Audit Report Finding 3 out of 3
Relevant policies: CCADB Incident Reporting Guidelines v3.2
Source of incident disclosure: A comment from the Chrome Root Program in the following Bugzilla incident:
https://bugzilla.mozilla.org/show_bug.cgi?id=2047579#c4
|
||
Updated•5 days ago
|
Assignee: nobody → pablo
Status: UNCONFIRMED → ASSIGNED
Ever confirmed: true
Whiteboard: [ca-compliance] [disclosure-failure]
You need to log in
before you can comment on or make changes to this bug.
Description
•