PKI Health Check

PKI Health Check (Engineering)

Project Description

Unsung was engaged by an engineering sector organisation to conduct a comprehensive assessment of a PKI implementation delivered by a third-party organisation. The health check was commissioned following significant concerns regarding absent documentation, lack of demonstrable compliance, and resulting erosion of confidence in the digital trust assured by the PKI service.

These concerns were creating substantial organisational impact including reluctance to adopt the PKI service for new use cases, compliance concerns, and operational risk from inability to support the infrastructure effectively.

Outcomes & Deliverables

Unsung delivered a comprehensive health check report providing clear visibility of PKI service status and a pragmatic path to demonstrable compliance.

A detailed report outlined findings across all dimensions of the PKI service, with evidence-based, prioritised recommendations and actionable steps to achieve demonstrable compliance whilst minimising technical debt.

Challenges

Complete absence of documentation relating to architecture, implementation, or configuration necessitated a methodical, structured forensic approach to identify and capture all system integrations, data flows, user and system interactions, and configuration parameters across all platform components.

Technologies Used

Keyfactor EJBCA, Thales Key Protection

Related Services

Learn more about our PKI health check, PKI consultancy.