← Chunghwa Telecom cases
Bugzilla #1946418
CCADB Compliance
Chunghwa Telecom: Delayed to Submit Annual CCADB Self-Assessment 2024 by GTLSCA.
RESOLVED
FIXED
Chunghwa Telecom
AI Summary
Chunghwa Telecom's GTLSCA submitted their 2024 CCADB annual self-assessment with a 21-day delay, which is a violation of the Chrome Root Program Policy. The delay was attributed to personnel changes and a lack of familiarity with the self-assessment requirements, resulting in insufficient task handover and scheduling. The Root CA Team provided reminders, but the responsible personnel were occupied with other tasks, leading to the late submission. GTLSCA has since taken steps to improve their internal processes to prevent future delays.
Chronology
- Root CA Team reminded GTLSCA PM about the overdue self-assessment.
- GTLSCA began filling out the self-assessment.
- Root CA Team reminded GTLSCA to submit the assessment.
- GTLSCA submitted the self-assessment.
- Root CA Team requested an incident report.
- Incident report explaining the delay was submitted.
Participants
Leo Fang
tmkuo@cht.com.tw
bwilson@mozilla.com
External References
Similar Local Cases
Chunghwa Telecom: Failure to Submit Annual CCADB Self-Assessment 2023 by GTLSCA.
Chunghwa Telecom: Delayed disclosure to Bug 2008782 GTLSCA Audit Incident Report #1 - mass certificate revocation plan
Chunghwa Telecom: Delayed Annual Audit Report 2024
Chunghwa Telecom: Delayed disclosure to Bug 2008799 GTLSCA Audit Incident Report #3 - Missing vulnerability scan
Chunghwa Telecom: Delayed audit disclosure for GTLSCA
CFCA: Delayed reporting of intermediate CA certificate
Netlock: Delayed reply from CPR sent to contact listed in section 1.5.2 of CP/S
Google Trust Services: New hire onboarding deviation from written procedure