← Autoridad de Certificacion Firmaprofesional cases
Bugzilla #2025538
CCADB Compliance
Firmaprofesional: Delayed weekly updates and responses on open incident reports
RESOLVED
FIXED
Autoridad de Certificacion Firmaprofesional
AI Summary
Firmaprofesional faced issues with timely updates and responses on several open incident reports, violating CCADB Incident Reporting Guidelines. The non-compliance was identified between March 13 and March 22, 2026, when required updates were not posted within the mandated 7-day period. The root causes included a lack of enforced tracking for response deadlines and insufficient ownership for incident follow-ups. Remediation actions have been completed, including implementing mandatory tracking and assigning ownership for open incidents, ensuring future compliance.
Chronology
- Non-compliance start date
- Non-compliance identified
- Incident opened to track delayed updates
- Action items completed
- Report closure summary provided
Participants
ext-antoni.camon@logalty.com
External References
Similar Local Cases
Firmaprofesional: Delayed initial incident reporting for Bug 2016475 (72-hour preliminary and 14-day full report timing)
Add some Firmaprofesional SubCAs to OneCRL
Firmaprofesional: 2019 audit Finding #2 - 6.4 Facility, management, and operational controls
Firmaprofesional: 2021 Audit Report Finding 3 out of 3
Firmaprofesional: 2022 - CPS without correct explanation about difference between OCSP and CRL
Firmaprofesional: Failure to Respond to April 2023 Survey
Microsoft PKI Services: Failure to report Bugzilla 2026452 within 72 hrs
Netlock: Failure to Provide Weekly Updates