← Buypass cases
Bugzilla #2005194
Self Reported Incident
Audit Finding
Buypass: Findings in 2025 ETSI Audit - Audit Incident Report #1 - Compliance auditing on support processes
RESOLVED
FIXED
Buypass
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
Buypass reported a minor nonconformity identified during the 2025 ETSI audit regarding the effectiveness of compliance auditing on support processes. The issue was disclosed by the CA itself and related to internal audits not being effectively performed according to established procedures. Following the incident, Buypass developed a corrective action plan, which included revisiting their internal audit approach and redefining their audit plan. All action items have been completed, and Buypass has committed to a structured and proactive compliance auditing process moving forward.
Chronology
- Non-compliance identified during the ETSI audit
- All action items related to the incident have been completed
Thread Activity
- Buypass — Registered Preliminary Incident Report detailing the nonconformity.
- Buypass — CAB approved root causes and action items in the Corrective Action Plan review.
- Buypass — Closure summary provided, confirming completion of all action items.
Participants
Buypass
External References
Similar Local Cases
Buypass: Findings in 2025 ETSI Audit - Audit Incident Report #2 - Supply chain policy
Buypass: Missing NCA identifier in cabfOrganizationIdentifier in PSD2 QWACs
Buypass: Using an external DNS Resolver for DNS lookups
Buypass: Insufficient Serial Number Entropy
Buypass: Illegal Business Category in a PSD2 QWAC
SwissSign: recommendation on CA-specific risk assessment
SwissSign: recommendation on linting software updates
Chunghwa Telecom: Findings in 2025 WebTrust Audit - GTLSCA Audit Incident Report #4 - Missing evaluation for third parties