← Saudi Data and Artificial Intelligence Authority (SDAIA) cases
Bugzilla #2015567
CCADB Compliance
Government of Saudi Arabia, NIC (SDAIA): Missing Contact Information in CCADB
RESOLVED
FIXED
Saudi Data and Artificial Intelligence Authority (SDAIA)
AI Summary
The Saudi Data and Artificial Intelligence Authority (SDAIA) was found to have missing contact information in the CCADB, specifically the fields for non-personal email aliases. This issue persisted from the creation of their record in December 2017 until it was resolved in February 2026. The delay in updating these fields was attributed to a lack of internal detection due to reliance on other communication channels and outdated primary contact information. Following the identification of this issue, SDAIA took corrective actions, including populating the required fields and consolidating multiple CCADB accounts into one. They have committed to ongoing compliance monitoring.
Chronology
- SDAIA record created in CCADB
- Notification sent to SDAIA regarding missing contact information
- CA Email Alias 1 populated in CCADB
- Consolidation of CCADB accounts completed
- Incident report closure requested
Participants
Ammar Asofyani
Dustin Hollenback
External References
Similar Local Cases
TurkTrust: Failure to respond to January 2018 survey
NISZ Nemzeti Infokommunikacios Szolgaltato: Missing Contact Information in CCADB
NETLOCK: Full Incident Report was not published within 14 days of notification
SwissSign: recommendation on log review process
Cybertrust Japan: three test websites not provided
DocuSign/Keynectis: Outdated audit statements for Class 2 Primary CA
DSV-Gruppe: Failure to respond to January 2018 survey
SwissSign: recommendation on linting software updates