← Autoridad de Certificacion Firmaprofesional cases
Bugzilla #2025536
CCADB Compliance
Firmaprofesional: Delayed initial incident reporting for Bug 2016475 (72-hour preliminary and 14-day full report timing)
RESOLVED
FIXED
Autoridad de Certificacion Firmaprofesional
AI Summary
Firmaprofesional identified a delay in reporting an incident related to Bug 2016475, failing to publish a preliminary report within the required 72 hours and a full report within 14 days. This non-compliance with the CCADB Incident Reporting Guidelines was recognized internally on February 4, 2026, and the issue was resolved with the publication of the full report on February 25, 2026. The CA has since implemented measures to ensure adherence to reporting deadlines, including formal ownership assignments and tracking of incident reporting milestones.
Chronology
- Delayed CCADB disclosure incident identified.
- 72-hour deadline for preliminary incident report elapsed.
- Preliminary incident report published.
- 14-day deadline for full incident report elapsed.
- Full incident report published.
- Separate incident opened to track delayed initial incident reporting.
- Action items for remediation completed.
- Final report closure summary posted.
Participants
ext-antoni.camon@logalty.com
External References
Similar Local Cases
Firmaprofesional: Delayed weekly updates and responses on open incident reports
Firmaprofesional: 2019 audit Finding #2 - 6.4 Facility, management, and operational controls
Firmaprofesional: 2021 Audit Report Finding 3 out of 3
Firmaprofesional: 2022 - CPS without correct explanation about difference between OCSP and CRL
Firmaprofesional: Failure to Respond to April 2023 Survey
Add some Firmaprofesional SubCAs to OneCRL
Microsoft PKI Services: Failure to report Bugzilla 2026452 within 72 hrs
NETLOCK: Full Incident Report was not published within 14 days of notification