Buypass: Findings in 2023 audit

Buypass underwent a 2023 audit which revealed two main findings. The first finding highlighted ineffective physical security reviews due to an accidental deletion of internal control in the scheduling program, leading to a lack of periodic review. The second finding involved improper implementation of certificate profile changes regarding Subject Attribute Encoding, which was self-reported. Action items have been established to prevent future occurrences, including improvements to the change process and the inclusion of verification steps.

1. 2024-01-19 Audit findings reported
2. 2024-02-01 Action item to include digicert/pkilint in the certificate issuance process due
3. 2024-03-14 Request to close the bug made