← Microsoft Corporation cases
Bugzilla #2026453
CCADB Compliance
Microsoft PKI Services: Failure to report Bugzilla 2026452 within 72 hrs
RESOLVED
FIXED
Microsoft Corporation
AI Summary
Microsoft PKI Services failed to report a non-compliance incident regarding the delayed publication of a Full Incident Report within the required 72-hour timeframe. The incident was identified on March 18, 2026, but the corresponding Bugzilla incident was not opened until March 25, 2026, resulting in a breach of CCADB incident reporting guidelines. The root cause was attributed to an internal misinterpretation of reporting deadlines. Remediation actions have been completed, including updates to governance procedures to ensure compliance in the future.
Chronology
- Full Incident Report due
- Bugzilla 2026453 opened
Participants
CentralPKI@microsoft.com
External References
Similar Local Cases
Microsoft PKI Services: Failure to update action item status within 3 days
Microsoft PKI Services: Incomplete Logical Access Review Audit Evidence
Microsoft PKI Services: Vulnerability Management Exception Tracking
Firmaprofesional: Delayed weekly updates and responses on open incident reports
Firmaprofesional: Delayed initial incident reporting for Bug 2016475 (72-hour preliminary and 14-day full report timing)
eMudhra emSign PKI Services : Delayed Publication of Issuing CA Certificates in CCADB
Netlock: Failure to Provide Weekly Updates
FNMT: Delayed Disclosure of Updated Policy Documents in the CCADB