Organizations are experiencing increasing pressure to manage digital trust at scale, across multiple functions in IT. So how do they handle it? To learn more about digital trust and these problems, VMblog spoke with industry expert, Deepika Chauhan, Chief Product Officer at DigiCert.
VMblog: Is digital trust a new concept for organizations?
Deepika Chauhan: Trust has always been important to all digital interactions, but as organizations’ digital footprint increases, they must make digital trust a strategic imperative so they and their customers can engage in the digital world with confidence. Organizations who prioritize a unified digital trust strategy
- add to their top line (by accelerating customer acquisition, improving employee productivity and driving digital innovation);
- and protect their bottom line (by reducing risk of outages of mission-critical applications, the attack surface area for breaches and customer churn due to loss of trust).
VMblog: What are the key components of digital trust?
Chauhan: The foundation of digital trust rests on four key building blocks:
- Standards that define what the requirements for trust are for a given technology or industry.
- Compliance and operations that generate or verify digital certificates establishing trust (through identity, integrity and encryption), with the assurance that these meet the requirements set forth by standards bodies.
- Trust management that ensures that companies are successfully managing certificate lifecycles and have centralized visibility and control over their use.
- Connected trust that extends trust throughout more complex supply chains (as occurs with software, devices and content).
VMblog: What are the main problems that organizations experience when trying to manage digital trust?
Chauhan:
- Managing certificate sprawl
- Managing identity and authentication at scale (volume and methods of authentication, provisioning gaps)
- Reducing risk of business disruption (certificate expiration or outages, human error, rogue certificates)
- Achieving agility in remediation (threats and vulnerabilities, outdated algorithms, changes in standards)
VMblog: How does DigiCert Trust Lifecycle Manager augment current processes?
Chauhan: Trust Lifecycle Manager unifies fragmented components into a full-stack solution that includes PKI services, public trust issuance and CA-agnostic certificate lifecycle management. This provides a seamless digital trust architecture that ensures fast issue resolution and business continuity.
VMblog: What are your differentiators?
Chauhan: We deliver capabilities that no one in the market is able to. Specifically:
- A full-stack solution in a single pane of glass that offers the ability to issue and manage all certificates in one place via our bringing together CA-agnostic certificate lifecycle management, PKI services and tight integration with best-in-class public trust issuance.
- Self-service: Certificate profiles and tools facilitating self-service issuance.
- Deploy anywhere: Flexibility for cloud, on-premises or hybrid models, enabling companies to manage their PKI use cases according to their security policy preferences.
- Centralized visibility and control over a company’s certificate landscape, reducing risk of business disruption and securing identity and access across the organization.
- Deep integration into user and enterprise technologies, supporting existing business systems and processes.
VMblog: Is there anyone else in the marketplace combining certificate management with PKI services?
Chauhan: There are solutions on the market, but Trust Lifecycle Manager is leading the industry with a new approach to bringing all elements together into one full-stack solution to help customers succeed with their digital trust initiatives.
##
