IdenTrust: Delay in updating a Bug 2016585 - Action item
IdenTrust reported that it had an open incident bug (Bug 2016585) with a pending task that was completed, but the incident bug was not updated within 3 days of the action item being completed. IdenTrust stated this was due to oversight during a recent personnel transition, which led to incident bugs not being properly tracked to meet the CCADB Incident Reporting Guidelines update timelines. The company said there was no customer certificate impact where identified, and characterized the issue as an incident reporting process issue. IdenTrust posted a full incident report describing the non-compliance period and the root cause. As remediation, IdenTrust updated its incident reporting procedure to include mandatory weekly updates and implemented automated reminders/alerts for open incidents. IdenTrust indicated all action items were completed and requested closure, and the CCADB incident-reporting contact issued a final call for comments before closure on approximately 2026-05-18. The bug is marked RESOLVED with resolution FIXED.
- Non-compliance period began for incident reporting updates related to Bug 2016585.
- IdenTrust identified the incident reporting deadline issue for the completed action item.
- Non-compliance period ended.
- IdenTrust completed the action item to update its incident reporting procedure for mandatory weekly updates.
- IdenTrust completed implementation of automated reminders/alerts for open incident reporting milestones.
- CCADB final call period ended and the incident report was expected to be closed.
- IdenTrust Services, LLC — IdenTrust submitted a preliminary incident report stating Bug 2016585 was not updated within 3 days after an action item was completed, citing the CCADB Incident Reporting Guidelines.
- IdenTrust Services, LLC — IdenTrust said it was working on the full incident report and would publish it no later than April 3.
- IdenTrust Services, LLC — IdenTrust posted the full incident report, including timeline, root cause (personnel transition and tracking oversight), and action items for procedure updates and automated reminders.
- IdenTrust Services, LLC — IdenTrust reported ongoing work to implement automated reminders and requested setting the next-update field to 2026-04-30.
- IdenTrust Services, LLC — IdenTrust updated the action item table showing automated reminders as complete.
- IdenTrust Services, LLC — IdenTrust stated all action items were completed and it would submit a closure report by end of the week.
- IdenTrust Services, LLC — IdenTrust submitted a report closure summary, describing remediation (mandatory weekly updates and automated reminders) and requesting closure.
- CCADB representative — CCADB issued a final call for comments or questions before closing the incident report on approximately 2026-05-18.