Firmaprofesional: 2022 - Define Device Obsolescence Process
Firmaprofesional reported a compliance finding identified during its annual eIDAS/ETSI audit. The finding stated that the TSP’s media management procedures did not include controls against obsolescence and deterioration of media within the required record-retention period. Firmaprofesional said auditors verified that it takes measures in case of device obsolescence, but that there was no formal procedure documented to undertake these measures. The CA stated that it would create a specific process to address the issue. Firmaprofesional later confirmed that the updated process against obsolescence and deterioration of media was implemented on June 29, 2022, and considered the issue resolved. The bug was then requested to be closed, and Mozilla indicated it would close the bug on 15-July-2022 unless further questions or concerns were raised. The bug’s resolution is FIXED and the current status is RESOLVED.
- Firmaprofesional opened a CA Certificate Compliance bug describing an eIDAS/ETSI audit finding about missing formal controls for media obsolescence/deterioration.
- Firmaprofesional updated its process to address obsolescence and deterioration of media.
- Mozilla planned to close the bug if no further questions or concerns were raised.
- Autoridad de Certificacion Firmaprofesional — Reported that an annual eIDAS/ETSI audit found no formal procedure for handling obsolescence/deterioration of media within the required retention period, and stated Firmaprofesional would create a specific process.
- Autoridad de Certificacion Firmaprofesional — Confirmed the updated process was updated on June 29, 2022 and stated the issue was resolved.
- Autoridad de Certificacion Firmaprofesional — Asked Mozilla to close the bug after completing the steps in section 7.
- Mozilla representative — Stated Mozilla would close the bug on Friday, 15-July-2022, unless additional questions or concerns were raised.