Key management

CBOM

A key inventory that never touches the private half is the only safe kind. Discover keys as metadata, classify custody, and find reuse before it bites.

Key Management

Integrate AWS KMS, HashiCorp Vault, and hardware HSMs via PKCS#11 for enterprise key management. Covers architecture patterns, auto-unseal, transit encryption, PKI secrets engine, and FIPS-compliant key hierarchies.

Standards & Compliance

Implement DORA (Digital Operational Resilience Act) cryptographic requirements for financial entities. Covers encryption standards, key management, ICT risk management, certificate lifecycle, and third-party oversight.

Key Management

Step-by-step runbook for rotating JSON Web Key Sets (JWKS) across AWS KMS, GCP Cloud KMS, and Azure Key Vault. Covers zero-downtime rotation, grace periods, automation scripts, and validation.

Key Management

Understand KMIP (Key Management Interoperability Protocol) — how it works, its operations, message structure, deployment architecture, and why it matters for enterprise key management and HSM integration.

Standards & Compliance

Implement NIST SP 800-57 key management recommendations — crypto periods, key states, algorithm selection, key derivation, and operational lifecycle management. Includes practical mapping to AWS KMS, Vault, and enterprise key managers.