← Government of The Netherlands, PKIoverheid (Logius) cases
Bugzilla #2008024
Audit Related
PKIoverheid: TSP CIBG Findings in 2025 ETSI Audit - Incident Report #3 – Asset Management
RESOLVED
FIXED
Government of The Netherlands, PKIoverheid (Logius)
AI Summary
The incident report details a minor non-conformity in asset management identified during the 2025 ETSI audit of PKIoverheid. The audit revealed that the asset management process did not include all critical assets operated by a supply chain contractor, and there was a lack of mapping between CIBG roles and Trusted Roles. A corrective action plan was created and approved, and all action items have since been closed. The report emphasizes the need for improved communication with auditors regarding asset documentation.
Chronology
- Non-compliance identified by auditor
- Corrective Action Plan created
- Corrective Action Plan approved by auditor
- Report Closure Summary posted
Participants
Patrick van den Berg
Policy Authority PKIoverheid
External References
Similar Local Cases
PKIoverheid: TSP CIBG Findings in 2025 ETSI Audit - Incident Report #8 – Human Resources Management
PKIoverheid: TSP CIBG Findings in 2025 ETSI Audit - Incident Report #5 – Risk Management
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #5 – CMDB
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #3 – Internal Audit
PKIoverheid: Missing intermediate CA certificates in WTBR audit statements Staat der Nederlanden 2017/2018
PKIoverheid: Overdue audit statements for intermediate certificates
NETLOCK: Findings in 2024 Audit
certSIGN: Findings in 2025 ETSI Audit - Audit Incident Report #3 – Missing certSIGN OID on Terms and Conditions