← Government of The Netherlands, PKIoverheid (Logius) cases
Bugzilla #1983263
Incident
Closure Request
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #3 – Internal Audit
RESOLVED
FIXED
Government of The Netherlands, PKIoverheid (Logius)
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
This case involves PKIoverheid's disclosure of a minor non-conformity identified during an annual ETSI audit of its subcontractor, KPN. The issue arose from the lack of an internal audit at KPN's subcontractor, which was noted by the CAB. PKIoverheid has since developed a Corrective Action Plan and updated agreements with subcontractors to include audit responsibilities. An external audit of the subcontractor is currently in progress, with a commitment to ensure timely internal audits in the future. The case has been resolved with all action items completed.
Chronology
- CAB identifies finding during annual ETSI audit
- Closure request filed after completion of all action items
Thread Activity
- Logius representative — Preliminary incident report submitted detailing minor non-conformity.
- Logius representative — Full incident report provided, outlining the audit finding and corrective actions.
- Logius representative — Closure summary submitted, confirming completion of all action items.
Participants
Logius representative
Community commenter
CCADB representative
External References
Similar Local Cases
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #9 – Lifecycle Management
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #10 – Firewall Rules and Review
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #11 – Anti-Malware Software
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #15 – Outdated Software
PKIoverheid: TSP Cleverbase Findings in 2025 ETSI Audit - Incident Report #1 – Incorrect issuer CA listed in CPS
PKIoverheid: TSP CIBG Findings in 2025 ETSI Audit - Incident Report #1 – Document Management
PKIoverheid: TSP CIBG Findings in 2025 ETSI Audit - Incident Report #2 – Supply Chain Management
PKIoverheid: TSP CIBG Findings in 2025 ETSI Audit - Incident Report #3 – Asset Management