← Government of The Netherlands, PKIoverheid (Logius) cases
Bugzilla #1983268
Certificate Problem Report
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #8 – Logical Access
RESOLVED
FIXED
Government of The Netherlands, PKIoverheid (Logius)
AI Summary
The incident report details a minor non-conformity identified during the 2025 ETSI audit regarding logical access reviews for a CA system. The system was not included in the quarterly review scope, leading to an assumption that separate reconciliation was unnecessary. KPN has since implemented corrective actions, including adding the application to the target list and enhancing the review process. All action items have been completed, and the CA owner commits to ongoing evaluations to align with best practices.
Chronology
- Application instance added to production environment.
- Auditor identifies finding.
- Corrective Action Plan created.
- Corrective Action Plan approved by auditor.
- Report closure summary provided.
Participants
Policy Authority PKIoverheid
External References
Similar Local Cases
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #9 – Lifecycle Management
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #14 – Back-up
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #13 – Restore Test
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #12 – Outdated Software
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #16 – EJBCA Configuration
PKIoverheid: TSP CIBG Findings in 2025 ETSI Audit - Incident Report #4 – Incident Management
PKIoverheid: TSP CIBG Findings in 2025 ETSI Audit - Incident Report #2 – Supply Chain Management
PKIoverheid: TSP CIBG Findings in 2025 ETSI Audit - Incident Report #1 – Document Management