Certificate-Related Outages Impact Most Businesses
March 01, 2017

Pete Goldin
APMdigest

Share this

Certificate-related outages negatively impact the reliability and availability of vital systems and services, according to a new study by Venafi.

“Certificates and keys are identity and access management for machines, just like user names and passwords are for humans,” said Kevin Bocek, VP of Security Strategy and Threat Intelligence at Venafi. “Certificates allow machines to communicate securely and that makes them an essential, but underappreciated, part of every organization’s digital ecosystem and our global digital economy. When certificates expire unexpectedly, critical services can be impacted. Unfortunately, most businesses do not have the visibility or tools necessary to manage this fundamental element of cyber security and operational availability effectively.”

The primary study findings include:

■ The majority (79 percent) of respondents suffered at least one certificate-related outage in 2016.

■ Over a third (38 percent) suffered more than six certificate-related outages in 2016.

■ Almost one in twenty (4 percent) suffered 100 or more certificate-related outages in 2016.

■ Almost two-thirds (64 percent) said their organizations could not respond to a certificate-related security event in six hours or less.

As the use of encryption explodes, the challenges connected with effective key and certificate management have proliferated. Recent research showed dramatic growth in the use of keys and certificates, especially among large organizations.

One of the primary drivers behind the surge in certificate usage is the explosion in the number of IP-enabled devices on business networks. Another challenge organizations face is the adoption of DevOps and Fast IT development processes that dramatically increase the number of certificates needed. This increase in certificates and their corresponding keys compounds the serious security vulnerabilities associated with cryptographic key and digital certificate mismanagement.

Many businesses are still unaware of the scale of this problem. Venafi customer data shows that the average organization found over 16,500 unknown keys and certificates of which they were not previously aware. Also, the new study shows that most companies do not have control over their key and certificate inventory, do not have an automated process for renewals and have no central record of when certificates are due to expire:

■ Almost two-thirds (65 percent) of organizations do not manage all their keys and certificates centrally.

■ Of those that do manage certificates centrally, 65 percent rely on security controls from their Certificate Authorities (CAs), which limit their visibility to certificates provided by the issuing CA.

“The good news is that certificate-related outages are completely preventable, but you need to understand the scale and the scope of the problem,” continued Bocek. “As we use more cloud services, IoT devices and DevOps automation, certificate usage is skyrocketing. To keep up with this expanding problem, organizations must automate the discovery, issuance, lifecycle, and remediation of all keys and certificates from the data center to the cloud to the IoT edge of their networks. Failure to do so puts the reliability and availability of critical services at risk and dramatically increases cyber security risks.”

Share this

The Latest

December 07, 2018

As more organizations embrace digital business, infrastructure and operations (I&O) leaders will need to evolve their strategies and skills to provide an agile infrastructure for their business. In fact, Gartner, Inc. said that 75 percent of I&O leaders are not prepared with the skills, behaviors or cultural presence needed over the next two to three years ...

December 06, 2018

Today there is an urgent need for Agents of Transformation, a new breed of technologist, primed to drive innovation and enable companies to thrive in the face of rapid technological advancement, according to The Agents of Transformation Report from AppDynamics, a Cisco company ...

December 05, 2018

One in four Global Fortune 2000 enterprises rank Internet of Things (IoT) deployment as the most important initiative in their organization, yet 90% experience barriers to effective implementation and expansion due to lack of IoT expertise and skills in-house, according to a new independent survey from VansonBourne ...

December 04, 2018

Nearly three-quarters (74%) of IT leaders are concerned that Internet of Things (IoT) performance problems could directly impact business operations and significantly damage revenues, according to a new report, entitled Overcoming the Complexity of Web-Scale IoT Applications: The Top 5 Challenges ...

December 03, 2018

Gartner highlighted the top strategic Internet of Things (IoT) technology trends that will drive digital business innovation from 2018 through 2023 ...

November 30, 2018

While 95 percent of organizations have a disaster recovery plan in place, 23 percent never test their plan, according to a new survey from Spiceworks ...

November 29, 2018

Cloud computing has clear and definite benefits. At the same time there is an excessive amount of vendor hype that it will fix a lot of problems which it will not. It can also create new problems with a lack of visibility and many IT professionals are disappointed with their leap to a pure cloud environment ...

November 28, 2018

In the world of digital experience monitoring (DEM) — where the end user experience is paramount — cloud-based nodes, along with a variety of other node types, are used to build a view of the end user's digital experience. But major companies are now depending solely on cloud nodes for DEM. Research from Catchpoint, in addition to real-world customer data, shows this is a mistake ...

November 27, 2018

Achieving success with cloud adoption remains an elusive challenge for many organizations. But why is that the case? After all, there are countless tools designed to facilitate the process of taking on-premises operations to the cloud ...

November 26, 2018

The results from the latest State of Testing Survey by SmartBear show that 80 percent of respondents are testing some kind of API or web service ...