← TurkTrust cases
Bugzilla #835538
Audit Related
TURKTRUST audit regarding change management procedures and controls
RESOLVED
TurkTrust
AI Summary
This case addresses an audit of TURKTRUST's change management procedures following the discovery of errors in two issued certificates. The audit aimed to ensure that corrective measures were implemented to prevent future mis-issuances. TURKTRUST has committed to enhancing their controls and underwent a special audit to verify these changes. The audit report and public statement were subsequently prepared to confirm compliance.
Chronology
- Initial bug report regarding TURKTRUST's change management issues.
- Special audit performed by BSI auditor.
- Inquiry about the availability of the audit report.
- Special audit statement created and attached.
Participants
Kathleen Wilson
Mert Ozarar
Christopher Soghoian
External References
Similar Local Cases
FNMT: Findings in 2019 Audit Statement, including domain validation methods, CAA, etc.
Trustis: Gap between audit periods
LuxTrust: Overdue Audit Statements 2019
Trustis Ltd Audit Statement 2017
GoDaddy: Action Items
DocuSign Audit Statements
DigiCert / Verizon: Qualified 2019 Audit Statements
Audit info for Gov of Spain (ACCV)