SwissSign: recommendation on firewall review

The audit report for SwissSign recommended improvements in the review process for firewall rules, particularly in identifying unused rules. The challenge identified was the limited automated visibility into firewall rule usage within an infrastructure-as-code environment, complicating the detection of unused rules. SwissSign has since investigated technical capabilities to enhance the firewall review process and has completed all action items related to this recommendation. They remain committed to continuous improvement in compliance with ETSI EN 319 401.

1. 2025-09-12 Audit report containing recommendations published
2. 2026-04-27 Action items completed and reviewed by auditors