← Government of The Netherlands, PKIoverheid (Logius) cases
Bugzilla #1983264
Certificate Problem Report
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #4 –Training
RESOLVED
FIXED
Government of The Netherlands, PKIoverheid (Logius)
AI Summary
The incident report details a minor non-conformity identified during the 2025 ETSI audit, where it was found that new KPN employees had not received the required training as per the security handbook. This issue arose due to insufficient handover processes when a new security officer was appointed. The CA has since implemented corrective actions, including a revised handover procedure and a monitoring system for training compliance. All action items have been completed, and the CA has committed to ongoing oversight of personnel training.
Chronology
- Non-compliance identified during audit
- Action items due date
- Report closure summary provided
- Final call for comments before closure
Participants
pkioverheid@logius.nl
External References
Similar Local Cases
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #11 – Anti-Malware Software
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #1 – Security Handbook
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #6 – Security Incident Procedure
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #13 – Restore Test
PKIoverheid: TSP Cleverbase Findings in 2025 ETSI Audit - Incident Report #1 – Incorrect issuer CA listed in CPS
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #12 – Outdated Software
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #9 – Lifecycle Management
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #14 – Back-up