Telia: Delayed submission of preliminary audit incident report
Telia Company disclosed a compliance issue involving delayed submission of a preliminary audit incident report. Telia stated that the non-compliance was identified on 2025-12-04 and concluded that it missed the 72-hour deadline to submit the preliminary audit incident report after clarification from the Chrome Root Program on how the “time becoming aware of” should be interpreted. Telia submitted the incident report on 2025-12-05. Telia attributed the root cause to a misinterpretation of the CCADB Policy and related incident reporting guidelines. As remediation, Telia reported a CCADB Policy update to the Telia PKI team and a full review and training with the Telia CA PKI team to ensure the correct interpretation of the incident reporting guidelines and adherence to expected reporting timeframes. Telia provided a report closure summary requesting closure, and the bug is marked RESOLVED with resolution FIXED.
- Telia’s audit non-compliance period began (as described in the incident report).
- Telia identified the audit non-compliance (as described in the incident report).
- Telia submitted the delayed preliminary audit incident report to Bugzilla (as described in the incident report).
- Telia completed the CCADB policy update action item for the Telia PKI team (as described in the incident report).
- Telia submitted a report closure summary requesting closure (as described in the thread).
- Teliacompany representative — Opened the bug with a full incident report describing delayed submission of a preliminary audit incident report and the timeline, root cause, and action items.
- Teliacompany representative — Posted a weekly update indicating the policy update action item was completed and that all action items were finished.
- Teliacompany representative — Submitted a report closure summary with remediation steps (policy update and training) and requested closure.
- CCADB representative — Issued a final call for comments and stated the incident would be closed on approximately 2025-12-24.