DigiCert: Late background refreshment check

DigiCert reported a late background refreshment check for trusted role staff, which was noted during a recent Webtrust audit. While their CPS states checks should occur every five years, three of six sampled checks were completed slightly late. This issue does not impact public PKI systems as the BR’s and root programs do not require this frequency. DigiCert plans to update their CPS to remove this requirement.

1. 2023-11-10 DigiCert's auditors provided draft reports for Annual Webtrust.
2. 2023-11-14 Discussion with auditors about background check tracking.
3. 2023-12-01 Case scheduled for closure unless further questions arise.