← Government of The Netherlands, PKIoverheid (Logius) cases
Bugzilla #1983271
Certificate Problem Report
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #11 – Anti-Malware Software
RESOLVED
FIXED
Government of The Netherlands, PKIoverheid (Logius)
AI Summary
The incident report details a minor non-conformity identified during the 2025 ETSI audit, where anti-malware software was absent on several servers and the update frequency of existing software did not meet ETSI requirements. The CA Owner, PKIoverheid, has since implemented corrective actions, including the installation of anti-malware solutions and improvements to their tracking processes for compliance with new regulations. All action items have been completed, and the report is now closed.
Chronology
- Effective date of updated ETSI requirements.
- Non-compliance identified by auditor.
- Corrective Action Plan approved.
- All action items completed and report closure requested.
Participants
pkioverheid@logius.nl
dzacharo@harica.gr
malcolm.doody@gmail.com
Patrick.Berg@logius.nl
incident-reporting@ccadb.org
External References
Similar Local Cases
PKIoverheid: TSP Cleverbase Findings in 2025 ETSI Audit - Incident Report #1 – Incorrect issuer CA listed in CPS
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #4 –Training
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #1 – Security Handbook
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #13 – Restore Test
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #6 – Security Incident Procedure
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #9 – Lifecycle Management
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #14 – Back-up
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #12 – Outdated Software