Entrust: Incomplete privileged access removal within 24 hours

Entrust reported an incident where an infrastructure personnel's privileged access to Certificate Systems was not fully disabled within the required 24 hours following their employment termination. This was discovered during a quarterly access review on May 21, 2025. The issue stemmed from a lack of clarity in the de-registration process, which did not explicitly list all privileges that needed to be revoked. Fortunately, no certificates were mis-issued, and the remaining access was revoked on the same day it was detected. Entrust has committed to updating their processes to prevent future occurrences.

1. 2025-04-17 Last day of employee holding System Administrator Trusted Role.
2. 2025-05-21 Quarterly access review begins; incomplete access removal discovered.
3. 2025-05-23 Preliminary incident report posted.
4. 2025-06-04 Full incident report posted.
5. 2025-06-17 Report closure summary provided; remediation actions completed.