← Government of The Netherlands, PKIoverheid (Logius) cases
Bugzilla #1983266
Certificate Problem Report
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #6 – Security Incident Procedure
RESOLVED
FIXED
Government of The Netherlands, PKIoverheid (Logius)
AI Summary
The incident report details a minor non-conformity identified during an annual ETSI audit, where the handling of security incidents by KPN was found to be inconsistent with established procedures. A new security officer was inadequately briefed on responsibilities, and agreements with a subcontractor did not align with internal protocols. Remediation steps included targeted briefings and updates to procedures, which have now been completed. KPN has committed to periodic reviews to ensure compliance and prevent future issues.
Chronology
- Non-compliance identified by auditor
- Corrective Action Plan approved
- Targeted briefing to Security Officer completed
- Report closure summary submitted
Participants
pkioverheid@logius.nl
External References
Similar Local Cases
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #1 – Security Handbook
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #4 –Training
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #11 – Anti-Malware Software
PKIoverheid: TSP Cleverbase Findings in 2025 ETSI Audit - Incident Report #1 – Incorrect issuer CA listed in CPS
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #12 – Outdated Software
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #16 – EJBCA Configuration
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #13 – Restore Test
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #9 – Lifecycle Management