IdenTrust: Delay in updating a Bug 2016585 incident report (Next update/closure report)
IdenTrust reported an incident involving its CCADB incident reporting process for Bug 2016585. The CA stated that Bug 2016585 had a pending task, but the bug was not updated with a Closure Report or a “Next update” date for more than seven days. IdenTrust attributed the delay to a personnel transition and said incident bugs were not properly tracked to ensure weekly updates were posted within the timelines required by the CCADB Incident Reporting Guidelines version 3.2. The CA reported that no customer certificate impact occurred where identified, and that the issue was limited to the incident reporting process. IdenTrust said it updated its incident report procedure to include mandatory weekly updates when a “next update” date is not specified and implemented automated reminders for open incidents. The thread indicates the action items were completed and IdenTrust requested closure, with a final call for comments issued by i**********g@ccadb.org and the bug marked RESOLVED with resolution FIXED.
- Non-compliance period began for incident reporting updates related to Bug 2016585.
- IdenTrust identified the incident reporting non-compliance for Bug 2016585.
- Non-compliance period ended for Bug 2016585 incident reporting updates.
- IdenTrust posted its full incident report and indicated procedure updates were completed for mandatory weekly updates.
- IdenTrust completed implementation of automated reminders for open incident reporting milestones.
- IdenTrust reported that all action items were completed and requested closure.
- CCADB incident report closure process completed and the bug was resolved.
- IdenTrust Services, LLC — IdenTrust posted a preliminary incident report stating Bug 2016585 was not updated with a Closure Report or “Next update” date within the required seven-day window.
- IdenTrust Services, LLC — IdenTrust stated it would publish the full incident report no later than April 3.
- IdenTrust Services, LLC — IdenTrust posted the full incident report, including timeline, root cause (personnel transition and tracking failure), and action items.
- IdenTrust Services, LLC — IdenTrust reported ongoing work on implementing automated reminders and requested the “next-update” field be set to 2026-04-30.
- IdenTrust Services, LLC — IdenTrust reported the automated reminders action item as complete and described the incident tracker with automated email alerts.
- IdenTrust Services, LLC — IdenTrust stated all action items were completed and that it would submit the closure report by end of the week.
- IdenTrust Services, LLC — IdenTrust provided a report closure summary, stating it updated its procedure for mandatory weekly updates and added automated reminders, and requested closure.
- CCADB representative — i**********g@ccadb.org issued a final call for comments and stated the incident report would be closed on approximately 2026-05-18.