← Government of Spain, Autoritat de Certificació de la Comunitat Valenciana (ACCV) cases
Bugzilla #1458042 Audit Finding

ACCV: Missing BR Self Assessment

RESOLVED FIXED Government of Spain, Autoritat de Certificació de la Comunitat Valenciana (ACCV)
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update. Always refer to the official Bugzilla thread as the authoritative source. If you spot an inaccuracy, let me know via the contact form.
AI Summary

Mozilla requested that CA operators complete and submit a BR Self Assessment by January 31, 2018. In this case, ACCV stated that it would deliver its BR Self Assessment by February 28, 2018, and later indicated an extended deadline of April 15, 2018. Mozilla reported that no BR Self Assessment had been received from ACCV by the time of the follow-up request, and asked ACCV to provide a near-term delivery date, explain why the deadline was missed and why Mozilla was not notified, and describe steps to prevent recurrence. ACCV delivered its BR Self Assessment on 14-May and provided an explanation for the delay, including translation/adaptation work for parts of the CPS and policies, time needed to become familiar with conducting the audit independently, staff training, and staff shortages. ACCV also stated that additional training tasks should only be necessary once and that it would refresh/update training as appropriate. The bug is marked RESOLVED with resolution FIXED.

Model: gpt-5.4-nano Generated: 2026-06-13 17:47 UTC Revised: 2026-06-16 19:10 UTC Confidence: 0.90 3 comments
Chronology
  1. Mozilla required CAs to complete and submit a BR Self Assessment by this date.
  2. The BR Self Assessment submission deadline was extended to this date per the January 2018 CA Communication.
  3. ACCV delivered its BR Self Assessment.
Thread Activity
  1. Fastly representative — Reported that no BR Self Assessment had been received from ACCV and requested a delivery date, an explanation for missing the deadline/notification, and prevention steps.
  2. Fastly representative — Noted that ACCV delivered the BR Self-Assessment and asked José to answer the remaining prevention-step question.
  3. Government of Spain, Autoritat de Certificació de la Comunitat Valenciana (ACCV) — Apologized for the delay and explained it was due to translation/adaptation of CPS/policies, learning to conduct the audit independently and training, and staff shortages; stated training would only need to be refreshed/updated later.
Participants
Fastly representative Government of Spain, Autoritat de Certificació de la Comunitat Valenciana (ACCV)
External References
Similar Local Cases
#1877680 RESOLVED Audit Document Audit Finding Opened 2024-01-31 · Closed 2024-07-15 · 60% similar
Telia: Findings in Audit 2023
#1990281 RESOLVED Audit Finding Self Reported Incident Opened 2025-09-23 · Closed 2026-05-07 · 58% similar
SwissSign: recommendation on self-assessment tool
#1455150 RESOLVED Ca Documents Audit Finding Opened 2018-04-18 · Closed 2023-02-22 · 47% similar
DigiCert: Missing audits for Intermediate certificates
#1539296 RESOLVED Audit Finding Opened 2019-03-26 · Closed 2024-06-30 · 41% similar
DigiCert: KPN Outdated Audit
#1833667 RESOLVED Audit Document Audit Finding Opened 2023-05-17 · Closed 2023-11-19 · 41% similar
certSIGN: Findings in 2023 ETSI Audit for certSIGN ROOT CA G2 - Audit Incident Report
#1897134 RESOLVED Audit Finding Opened 2024-05-16 · Closed 2024-09-06 · 41% similar
certSIGN: Findings in 2024 ETSI Audit - Audit Incident Report
#1906028 RESOLVED Self Reported Incident Audit Finding Opened 2024-07-03 · Closed 2024-08-15 · 40% similar
Microsoft PKI Services: Vulnerability Management Exception Tracking
#1704199 RESOLVED Ca Documents Audit Finding Opened 2021-04-09 · Closed 2023-02-22 · 40% similar
FNMT: Minor non-conformities in 2021 audit statement

We use only essential cookies and local browser storage for preferences and security. See our Privacy Policy for details.

Confirm action