← Microsoft Corporation cases
Bugzilla #2021175
CCADB Compliance
Microsoft PKI Services: Failure to update action item status within 3 days
RESOLVED
FIXED
Microsoft Corporation
AI Summary
Microsoft PKI Services (MPS) failed to update open incident reports within 3 days of action items being changed, completed, or delayed. This issue specifically affected two bugs, where updates were not posted within the required timeframe from June 2025 to February 2026. The delays were attributed to MPS's Bugzilla response process, which lacked daily monitoring of action item statuses. MPS has since updated its internal governance procedures to ensure timely disclosures moving forward.
Chronology
- Non-compliance start date
- Non-compliance identified date
- Bugzilla 2021175 opened
- Report Closure Summary provided
Participants
CentralPKI@microsoft.com
rdaurne77@gmail.com
bsmith@cabbage.org.uk
incident-reporting@ccadb.org
External References
Similar Local Cases
Microsoft PKI Services: Failure to report Bugzilla 2026452 within 72 hrs
Microsoft PKI Services: Incomplete Logical Access Review Audit Evidence
Microsoft PKI Services: Vulnerability Management Exception Tracking
DigiCert: Issues with CCADB entries
IdenTrust: Delay in updating a Bugzilla ticket Bug 2014610 - Next update
DigiCert: Late CP/CPS CCADB uploads
Netlock: Failure to Provide Weekly Updates
FNMT: Delayed Disclosure of Updated Policy Documents in the CCADB