SwissSign: recommendation on risk assessment

The Bugzilla case addresses an audit report recommendation for SwissSign to enhance its risk assessment processes and improve the tracking of countermeasures in accordance with ETSI EN 319 401. The incident was disclosed following an audit, and while it highlighted areas for improvement, it did not indicate any non-compliance or impact on certificate issuance. SwissSign has since updated its risk assessment process to align with best practices and completed all action items from the audit.

1. 2025-09-12 Audit report containing recommendations published
2. 2026-04-27 Action item completed and report closure summary provided