Atos tracking bug for possible audit delays during COVID-19

This case tracks Atos’s 2020 ETSI audit timing and whether COVID-19 restrictions would delay or alter the audit process for Atos TrustedRoot 2011. Atos opened the bug to share its audit plan, noting that the audit period ended on 2020-04-28 and that it initially expected to perform the audit onsite, while also preparing remote-audit options if travel restrictions worsened. The audit was ultimately carried out remotely for the April sessions, with a later onsite follow-up in Bavaria scheduled and completed in September 2020. Atos and Mozilla discussed the limitations of the remote audit, and Atos said the final audit report and amendment letter would be provided to Mozilla. Mozilla later noted that the audit statement had been processed in CCADB and that the bug could be closed. The bug is resolved fixed.

1. 2020-03-31 Atos’s audit period for Atos TrustedRoot 2011 was nearing its end and the company planned an ETSI audit that might need remote sessions because of COVID-19 restrictions.
2. 2020-04-19 The audit began with the Lower Saxony site as a remote session.
3. 2020-05-04 Atos decided the Bavaria sites would also be audited remotely.
4. 2020-06-15 Atos received an attestation letter noting the remote-audit limitations and planned to add it to CCADB.
5. 2020-09-23 The onsite follow-up audit in Bavaria took place.
6. 2020-10-26 Atos said the final report was available and that the 2020 audit was complete for all locations.

1. 2020-03-31 Disabled representative — Atos opened the bug to share its audit plan and said it would update its risk assessment and business continuity plan if restrictions affected the audit.
2. 2020-03-31 Mozilla representative — Kathleen Wilson thanked Atos and set the next update date to 2020-04-19.
3. 2020-05-04 Community commenter — Ryan Sleevi asked whether all audits would be remote and requested details on how the remote-audit concerns and lockdown restrictions were addressed.
4. 2020-06-18 Mozilla representative — Kathleen Wilson posted the audit statement URL and said she had finished processing the audit case in CCADB.
5. 2020-06-25 Mozilla representative — Ben Wilson asked Atos to plan a follow-up onsite audit in Bavaria and set the next update to 2020-09-15.
6. 2020-10-26 Mozilla representative — Ben Wilson said the audit report was saved for reference, CCADB would be updated, and the bug could be closed.