CIP’s new Cryptography & PKI Maturity Model

CIP have developed a Cryptography and Public Key Infrastructure (PKI) maturity model in order to help our clients diagnose the current maturity level of their PKI management, and so develop strategies and plans to improve their PKI and overall cybersecurity posture.

A summary of the model is shown here. We have more detailed diagnostic descriptions that we use in client situations that we would be very happy to discuss. We have developed a 5 level maturity model - from basic to leader. The level of cyber security risk reduces significantly as the maturity level increases.

For each of the five levels we have identified what the typical activities are that take place in the main areas of PKI management:

• PKI strategy

• PKI policy

• Certificate and key discovery

• Certificate and key lifecycle management

• PKI services and processes

Applying this framework enables businesses to assess their current level PKI maturity and consequent level of risk, and to identify what needs to be done to reduce their PKI risk.

If you are interested in understanding more about the model and how we apply it, please do contact us.