← National Certification Authority of Sri Lanka (NCA of Sri Lanka) cases
Bugzilla #2031062
Audit Related
Sri Lanka CERT – Audit Statement Delay Explanation Letter
UNCONFIRMED
National Certification Authority of Sri Lanka (NCA of Sri Lanka)
AI Summary
This case addresses a delay in issuing the WebTrust Assurance Reports for Sri Lanka CERT, which were expected by November 30, 2025. The delay was attributed to administrative issues stemming from the migration of the WebTrust Practitioner’s License from BDO Consulting Sdn Bhd to BDO PLT in Malaysia. Although the reports were not issued on time, the audit process itself was not compromised, and there were no security incidents or certificate mis-issuance events related to this delay. Relevant documentation has been provided for review.
Chronology
- Bug created to explain audit report delay
Participants
Mahinda Kandapahala
External References
Similar Local Cases
Thailand NRCA - Explanation for delay in WebTrust Assurance report
Microsec: preliminary Audit Letter Validation
Firmaprofesional: 2019 Audit Report Findings
Audit documents for ISRG / Let's Encrypt
Camerfirma: Qualified Audit Statements
Trustis: Gap between audit periods
Telia: Qualified BR Audit Statement
Audit info for Network Solutions (Web.com)