← Government of The Netherlands, PKIoverheid (Logius) cases
Bugzilla #1983256
Certificate Problem Report
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #1 – Security Handbook
RESOLVED
FIXED
Government of The Netherlands, PKIoverheid (Logius)
AI Summary
The PKIoverheid KPN TSP subCA was found to have an outdated Security Handbook during an annual ETSI audit, resulting in a minor non-conformity. The issue stemmed from unclear procedures for updating the handbook, which were not effectively communicated to the new security officer. KPN has since updated the handbook and established a periodic review process to ensure compliance with ETSI requirements. All action items related to this incident have been completed, and the case is now resolved.
Chronology
- Non-compliance identified by auditor
- KPN created a Corrective Action Plan
- Security Handbook updated
- Corrective Action Plan approved by auditor
- Report closure summary provided
Participants
pkioverheid@logius.nl
External References
Similar Local Cases
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #6 – Security Incident Procedure
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #4 –Training
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #11 – Anti-Malware Software
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #12 – Outdated Software
PKIoverheid: TSP Cleverbase Findings in 2025 ETSI Audit - Incident Report #1 – Incorrect issuer CA listed in CPS
PKIoverheid: TSP CIBG Findings in 2025 ETSI Audit - Incident Report #1 – Document Management
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #16 – EJBCA Configuration
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #14 – Back-up