← Government of The Netherlands, PKIoverheid (Logius) cases
Bugzilla #2008025
Certificate Problem Report
PKIoverheid: TSP CIBG Findings in 2025 ETSI Audit - Incident Report #4 – Incident Management
RESOLVED
FIXED
Government of The Netherlands, PKIoverheid (Logius)
AI Summary
The PKIoverheid CA faced non-conformities in its incident management process as identified during the 2025 ETSI audit. Key issues included the lack of defined SLAs, RTOs, and RPOs for P2 and P3 incidents, inadequate escalation paths, and insufficient quality assurance on incident process descriptions. A corrective action plan was developed and approved, leading to the redesign of the incident management process and improvements in monitoring and reporting. All action items have been completed, and the incident report is now closed.
Chronology
- Non-compliance identified by auditor
- Corrective Action Plan created
- Corrective Action Plan approved by auditor
- Report Closure Summary posted
- Final call for comments on Incident Report
Participants
Patrick van den Berg
Policy Authority PKIoverheid
External References
Similar Local Cases
PKIoverheid: TSP CIBG Findings in 2025 ETSI Audit - Incident Report #2 – Supply Chain Management
PKIoverheid: TSP CIBG Findings in 2025 ETSI Audit - Incident Report #1 – Document Management
PKIoverheid: TSP CIBG Findings in 2025 ETSI Audit - Incident Report #7 – Change Management
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #8 – Logical Access
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #9 – Lifecycle Management
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #12 – Outdated Software
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #13 – Restore Test
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #14 – Back-up