iTrusChina: Failure to Provide Regular Incident Update
iTrusChina reported an incident in which it failed to provide regular incident updates in Bugzilla. The CA said it was notified by a third party on March 22, 2026 that it did not provide timely updates of its Bug 2013805, which it considered a violation of the CCADB Incident Reporting Guidelines. In its report, iTrusChina stated that the planned update due around March 16 was missed due to human error, and that its governance process lacked a double-checking mechanism to ensure prompt updates. iTrusChina said it began root cause analysis and mitigation after realizing the issue on March 23, 2026. The CA committed to establishing a double-check mechanism (with at least two personnel) and to checking all its open incidents to ensure timely updates. In later comments, iTrusChina stated that the action items were finished and requested closure. The bug is marked RESOLVED with resolution FIXED.
- iTrusChina was notified by a third party that it had not provided timely incident updates for Bug 2013805.
- iTrusChina realized the issue and began root cause analysis and mitigation.
- iTrusChina requested closure after completing the disclosed action items.
- The incident report bug was resolved (FIXED).
- iTrusChina Co., Ltd. — Opened a full incident report stating iTrusChina failed to provide regular updates for Bug 2013805, citing human error and lack of a double-checking mechanism, and listing remediation action items.
- iTrusChina Co., Ltd. — Reported that iTrusChina was monitoring for comments/questions and that all action items were finished.
- iTrusChina Co., Ltd. — Stated iTrusChina was monitoring the bug for comments/questions and would provide more information if needed.
- iTrusChina Co., Ltd. — Acknowledged monitoring for comments/questions and thanked participants.
- iTrusChina Co., Ltd. — Reiterated that iTrusChina was monitoring and that all action items had been finished.
- iTrusChina Co., Ltd. — Stated iTrusChina was monitoring and would provide more information if needed.
- iTrusChina Co., Ltd. — Provided a report closure summary, reiterated root causes and remediation, and requested closure after completing action items.
- CCADB representative — Issued a final call for comments/questions and said the incident report would be closed approximately 2026-05-01 if no further input was received.