Certificate Management
What is Certificate Management?
The processes for managing the lifecycle of digital certificates including issuance, renewal, revocation, and key storage.
Terms that appear alongside certificate management
Each of these is named in at least one of the same controls as certificate management. The number is how many controls name both.
- tls 5 shared controls
- cybersecurity 2 shared controls
- nist 2 shared controls
- encryption 2 shared controls
- key management 2 shared controls
- ipsec 2 shared controls
- authentication 2 shared controls
- integrity 2 shared controls
Frameworks that govern certificate management
What the standards actually require on certificate management
Requirements naming certificate management across 6 standards, quoted from the control text.
Document and implement an enterprise certificate management standard covering the certificate lifecycle and certificate policies, so certificates used by critical services are tracked and renewed.
ASBv3-DP-7 · Use a secure certificate management process →Use AWS Certificate Manager and Private CA to issue, deploy and rotate TLS certificates, avoiding manual installation and unmanaged certificate stores.
SEC09-BP01 · Implement secure key and certificate management →Certificate management. Control from ISO 27043 framework, domain: ISO 27043: Cryptography.
ISO27043-19 · Certificate management →Certificate management. Control from ISO/SAE 21434 framework, domain: ISO/SAE 21434: Cryptography.
ISO21434-19 · Certificate management →Participants must use qualified certificates from the Open Banking Directory for mutual TLS authentication.
OB-SEC.4 · Certificate Management →HKMA TM-G-1 Information Security Programme. Comprehensive technical + administrative + physical security controls. (1) INFORMATION SECURITY PROGRAMME (TM-G-1.6.1) - documented + Board-approved information security programme + governance + roles + ISMS-style al...
HKMA-TMG1-InfoSec-Access-PAM-Network-Crypto-DLP-Endpoint · TM-G-1 Information Security Programme + Access + PAM + Network + Crypto + DLP + Vulnerability + Endpoint →Questions people ask about certificate management
What is Certificate Management?
Why is Certificate Management important for compliance?
Which compliance frameworks address Certificate Management?
Where can I learn more about Certificate Management?
See how Certificate Management applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.