← Government of The Netherlands, PKIoverheid (Logius) cases
Bugzilla #2008023
Certificate Problem Report
PKIoverheid: TSP CIBG Findings in 2025 ETSI Audit - Incident Report #2 – Supply Chain Management
RESOLVED
FIXED
Government of The Netherlands, PKIoverheid (Logius)
AI Summary
The incident report details a minor non-conformity related to Supply Chain Management identified during an annual ETSI audit. Key issues included the absence of a general Supply Chain Management policy and incomplete contracts with suppliers regarding management requirements. The report outlines several contributing factors, including the lack of awareness in reporting and the absence of a time-stamping service. Remediation actions have been initiated, with most action items closed, although some remain in progress due to legal complexities.
Chronology
- Non-compliance identified by auditor
- Corrective Action Plan created
- Corrective Action Plan approved by auditor
- First four action items closed
- Final two action items in progress
- Report closure summary provided
Participants
Patrick van den Berg
Policy Authority PKIoverheid
Dustin Hollenback
External References
Similar Local Cases
PKIoverheid: TSP CIBG Findings in 2025 ETSI Audit - Incident Report #7 – Change Management
PKIoverheid: TSP CIBG Findings in 2025 ETSI Audit - Incident Report #4 – Incident Management
PKIoverheid: TSP CIBG Findings in 2025 ETSI Audit - Incident Report #1 – Document Management
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #9 – Lifecycle Management
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #14 – Back-up
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #16 – EJBCA Configuration
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #8 – Logical Access
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #12 – Outdated Software