Chunghwa Telecom: Failure to Submit Annual CCADB Self-Assessment 2023 by GTLSCA.

Chunghwa Telecom's GTLSCA failed to submit the 2023 CCADB self-assessment report on time, violating compliance requirements outlined in the Chrome and Mozilla Root Program policies. The incident was primarily caused by the reassignment of the responsible team member, which led to a lack of internal handover and tracking mechanisms. Although the incident did not immediately impact certificate validation, it highlighted significant shortcomings in internal process management. Remedial actions have been taken, including the submission of the 2024 self-assessment and the implementation of improved compliance tracking and notification systems to prevent future occurrences.

1. 2023-09-11 Root CA Team reminded GTLSCA to conduct its CCADB Policy Self-Assessment.
2. 2023-12-29 Responsible personnel failed to submit the self-assessment due to reassignment.
3. 2025-01-20 GTLSCA submitted the CCADB Self-Assessment 2024.
4. 2025-02-06 Incident Report created to explain the failure to submit the 2023 self-assessment.
5. 2025-03-10 Report Closure Summary issued, confirming completion of action items.