Audit Statements for GlobalSign

This case is about providing audit statements for GlobalSign. The bug was created by Kathleen Wilson, who attached a “GlobalSign WTBR Indp Accountant Report and Mgmt Assertion FINAL 2017” and noted that the 2017 WTBR was a qualified report, so it was not posted on webtrust.org. Later, Richard Zhu (GlobalSign) added attachments for the 2018 WebTrust CA audit, including WebTrust Baseline Requirements, WebTrust EV, WebTrust EV Code Signing, and WebTrust Publicly Trusted Code Signing. Kathleen Wilson then provided direct links to the WebTrust seals on the cpacanada site for the relevant seal IDs. The bug is currently marked RESOLVED with the resolution WORKSFORME. No other compliance issues or remediation actions are described in the thread beyond sharing the audit materials and seal links.

1. 2017-08-08 Bug created to submit GlobalSign WTBR/WebTrust audit statements and related materials.
2. 2018-07-27 GlobalSign audit attachments for 2018 WebTrust programs were added to the bug.
3. 2018-07-27 Direct links to WebTrust seal pages on the cpacanada site were provided.

1. 2017-08-08 Mozilla representative — Created an attachment for the 2017 WTBR independent accountant report and management assertion, stating the report was qualified and therefore not posted on webtrust.org.
2. 2018-07-27 GlobalSign nv-sa — Added multiple attachments for the 2018 WebTrust CA/BR/EV/EV Code Signing/Publicly Trusted Code Signing audit materials.
3. 2018-07-27 Mozilla representative — Provided direct cpacanada URLs to the WebTrust seal pages for the relevant seal IDs.