IdenTrust: Delay in updating a Bugzilla ticket Bug 2014610 - Next update
IdenTrust reported that an open incident bug (Bug 2014610) with a pending task was not updated with a Closure Report or a “Next update” date for more than seven days. In the incident report, IdenTrust stated this was due to oversight during a recent personnel transition, when incident bugs were not properly tracked to ensure weekly updates within the timelines required by the CCADB Incident Reporting Guidelines. IdenTrust said there was no customer certificate impact where identified, and characterized the issue as an incident reporting process problem. As remediation, IdenTrust updated its incident report procedure to include mandatory weekly updates when a “next update” date is not specified. IdenTrust also implemented automated reminders (including automated email alerts) for open incidents to prompt for updates and warn when the “Next-Update” deadline is approaching. IdenTrust reported that all action items were completed and requested closure, and the bug was resolved as FIXED.
- Non-compliance period began for incident reporting updates related to Bug 2014610.
- Non-compliance period ended for the incident reporting update issue.
- IdenTrust identified the incident reporting tracking lapse and disclosed it in the related incident context.
- IdenTrust completed the procedure update to provide mandatory weekly updates for incidents lacking a specified next-update date.
- IdenTrust completed implementation of automated reminders for open incidents.
- The incident report was closed following the final call for comments.
- IdenTrust Services, LLC — IdenTrust submitted a preliminary incident report stating Bug 2014610 was not updated with a Closure Report or “Next update” date for more than seven days.
- IdenTrust Services, LLC — IdenTrust stated it would provide the full incident report no later than April 3.
- IdenTrust Services, LLC — IdenTrust posted the full incident report, attributing the delay to oversight during a personnel transition and listing action items and timelines.
- IdenTrust Services, LLC — IdenTrust reported ongoing work to implement automated reminders and requested the “next-update” field be set to 2026-04-30.
- IdenTrust Services, LLC — IdenTrust updated the action item status showing automated reminders as complete and reiterated the incident reporting remediation plan.
- IdenTrust Services, LLC — IdenTrust stated all action items were completed and that it would submit the closure report by end of the week.
- IdenTrust Services, LLC — IdenTrust posted the report closure summary, describing the root cause (personnel transition and tracking) and the remediation (mandatory weekly updates and automated reminders), and requested closure.
- CCADB representative — CCADB sent a final call for comments and noted the report would be closed on approximately 2026-05-18.