← Government of The Netherlands, PKIoverheid (Logius) cases
Bugzilla #2008028
Certificate Problem Report
PKIoverheid: TSP CIBG Findings in 2025 ETSI Audit - Incident Report #7 – Change Management
CLOSED
FIXED
Government of The Netherlands, PKIoverheid (Logius)
AI Summary
The incident report details a minor non-conformity related to Change Management identified during the 2025 ETSI audit of PKIoverheid. The audit revealed that the supply chain was not integrated into the Change Management process, leading to a lack of tracking for supply chain changes. The CA owner has committed to formalizing agreements with suppliers and improving oversight of change management processes. All action items have been completed, and the report is now closed.
Chronology
- Non-compliance identified by auditor
- Corrective Action Plan created
- Corrective Action Plan approved by auditor
- Report closure summary issued
Participants
Patrick van den Berg
Dustin Hollenback
External References
Similar Local Cases
PKIoverheid: TSP CIBG Findings in 2025 ETSI Audit - Incident Report #2 – Supply Chain Management
PKIoverheid: TSP CIBG Findings in 2025 ETSI Audit - Incident Report #1 – Document Management
PKIoverheid: TSP CIBG Findings in 2025 ETSI Audit - Incident Report #4 – Incident Management
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #13 – Restore Test
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #11 – Anti-Malware Software
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #4 –Training
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #8 – Logical Access
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #9 – Lifecycle Management