Sectigo: Trusted Role Access provided prior to completion of onboarding process

During an annual WebTrust audit, Sectigo identified that access to Certificate Systems was granted to two employees before completing their background checks, and to three others before finishing their validation training. Although this was found to technically meet their CPS requirements, it raised concerns about compliance with internal policies. The incident was documented, and a full report was provided, highlighting the need for stricter adherence to training and background check protocols. The case has been resolved with all action items completed.

1. 2023-03-29 Verification of identity for Employee #1 and #2 completed.
2. 2023-04-18 Certificate System accounts created for Employee #1 and #2.
3. 2023-09-11 Internal audit report highlights policy violation.
4. 2024-06-26 Final action item in incident report completed.
5. 2024-07-03 Discussion on closing the bug.