Firmaprofesional: Delayed weekly updates and responses on open incident reports
Firmaprofesional reported an incident reporting process non-conformity in which it did not provide timely required weekly updates or timely responses on several open CCADB incident reports. The issue applied specifically to open incident reports without a recorded Next update date, where no response or status update was posted within 7 days as required by the CCADB Incident Reporting Guidelines. The CA stated that the incident was identified through public follow-up comments noting the missed reporting cadence, and that it did not involve certificate issuance being stopped because it was an incident management process issue only. Firmaprofesional’s remediation included implementing mandatory tracking of Bugzilla response deadlines and required weekly update dates, assigning primary and backup owners with escalation triggers for overdue updates, and adding a control requiring Next update date review when an incident remains open after a remediation update. The bug thread records that the action items due on 2026-04-10 were completed and the action items table was updated accordingly. Firmaprofesional requested closure of the incident report, and CCADB issued a final call for comments with an expected closure date of approximately 2026-04-23. The bug is marked RESOLVED with resolution FIXED.
- Firmaprofesional’s 7-day update/response deadlines elapsed for several open incident reports without further updates or recorded Next update dates.
- A separate incident was opened to track delayed weekly updates and responses on open incident reports.
- Firmaprofesional completed the action items to address missed Bugzilla update deadlines and ownership/escalation controls.
- Firmaprofesional requested closure of the incident report after completing remediation actions.
- CCADB planned to close the incident report after a final comment window.
- Logalty representative — Firmaprofesional submitted a preliminary incident report stating that required CCADB weekly updates and acknowledgements were not provided within the expected timeframe for several open incident reports.
- Logalty representative — Firmaprofesional posted the full incident report detailing that weekly updates/responses were not posted within 7 days when no Next update date was recorded, and described root causes and remediation timeline.
- Logalty representative — Firmaprofesional stated there was no material change and that the next update/action item due dates remained unchanged.
- Logalty representative — Firmaprofesional again reported no material change and reiterated the action item due dates.
- Logalty representative — Firmaprofesional confirmed the 2026-04-10 action items were completed and updated the action items table accordingly.
- Logalty representative — Firmaprofesional provided a report closure summary, stating remediation was completed and requesting closure of the incident report.
- CCADB representative — CCADB issued a final call for comments and indicated the incident report would be closed on approximately 2026-04-23.