ACCV: Late Audit Statement

This case concerns ACCV submitting audit statements after the audit period ended. The audit statements for ACCV were received about six months after the end of the audit period, which the reporter said violated Mozilla Root Store Policy section 3.1.3. ACCV explained that changes to the Public Sector Contracts Act (in force March 2018) modified regulatory aspects of audit selection and tender procedures, preventing ACCV from contracting audits as in previous years. ACCV stated it had to use a different contracting modality that required more time and additional administrative procedures, resulting in a delay in hiring WT and BR/WT audits. ACCV said it prepared a public tendering process for the next three years to prevent a recurrence in the near future. Mozilla indicated it was satisfied with ACCV’s response and the bug was created for tracking, then resolved as FIXED.

1. 2018-11-16 Mozilla received ACCV audit statements about six months after the audit period ended.

1. 2018-11-16 Fastly representative — Reported that ACCV’s audit statements were received six months after the audit period ended, in violation of Mozilla Root Store Policy section 3.1.3, and asked for an explanation and prevention steps.
2. 2018-11-16 Fastly representative — Added ACCV’s explanation that legal/regulatory changes forced a different tender modality, causing delays in contracting the audits, and described a three-year public tendering process to avoid recurrence.
3. 2019-01-02 Community commenter — Asked how Mozilla was handling the issue and whether Mozilla was satisfied with the root cause and mitigation steps.
4. 2019-01-02 Fastly representative — Stated Mozilla was satisfied with ACCV’s response and that the bug was created for tracking, then marked it resolved.