← Government of The Netherlands, PKIoverheid (Logius) cases
Bugzilla #1983267
Incident
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #7 – Change Management
RESOLVED
FIXED
Government of The Netherlands, PKIoverheid (Logius)
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
This case involves a minor non-conformity identified during an annual ETSI audit of PKIoverheid's TSP KPN, specifically regarding change management procedures not being consistently followed. The CA disclosed the incident, which was triggered by findings from the audit. A corrective action plan was created and approved, leading to the implementation of an API to automate the registration of DevOps changes. The remediation was completed ahead of schedule, and the CA is committed to adhering to change management procedures moving forward.
Chronology
- Non-compliance identified during ETSI audit.
- Remediation of the incident completed ahead of schedule.
Thread Activity
- Logius representative — Preliminary incident report submitted detailing minor non-conformity.
- Logius representative — Updated incident report reflecting applicable audit criteria including NCSSRs.
- Logius representative — Closure statement submitted confirming completion of remediation.
Participants
Logius representative
Apple representative
CCADB representative
External References
Similar Local Cases
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #9 – Lifecycle Management
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #10 – Firewall Rules and Review
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #11 – Anti-Malware Software
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #15 – Outdated Software
PKIoverheid: TSP Cleverbase Findings in 2025 ETSI Audit - Incident Report #1 – Incorrect issuer CA listed in CPS
PKIoverheid: TSP CIBG Findings in 2025 ETSI Audit - Incident Report #1 – Document Management
PKIoverheid: TSP CIBG Findings in 2025 ETSI Audit - Incident Report #2 – Supply Chain Management
PKIoverheid: TSP CIBG Findings in 2025 ETSI Audit - Incident Report #3 – Asset Management