Open
Bug 2082644
Opened 5 days ago
Updated 37 minutes ago
D-Trust: Finding #1 of 2 in 2026 ETSI Audit – vulnerability management
Categories
(CA Program :: CA Certificate Compliance, task)
CA Program
CA Certificate Compliance
Tracking
(Not tracked)
ASSIGNED
People
(Reporter: ana-laura.martorano, Assigned: ana-laura.martorano)
Details
(Whiteboard: [ca-compliance] [policy-failure] [audit-finding])
Preliminary Incident Report
Summary
Incident description:
D-Trust: Finding #1 of 2 in 2026 ETSI Audit – vulnerability management
During D-Trust’s 2026 European Telecommunications Standards Institute (ETSI) audit, the auditors identified a finding regarding vulnerability management. Not every critical vulnerability was addressed within the deadline of 48 hours.
Relevant policies:
ETSI EN 319 401
Quote:
REQ-7.9.2-09: The TSP shall address any critical vulnerability not previously addressed by the TSP, within a period of 48 hours after its discovery.
Source of incident disclosure:
Audit. The finding was identified during the 2026 annual ETSI audit.
|
||
Updated•37 minutes ago
|
Assignee: nobody → ana-laura.martorano
Status: UNCONFIRMED → ASSIGNED
Ever confirmed: true
Whiteboard: [ca-compliance] [policy-failure] [audit-finding]
You need to log in
before you can comment on or make changes to this bug.
Description
•