Chapter 4
PKI Management and Security
In Chapter 1, “Introduction,” we mentioned that this book addresses public key infrastructure policies, standards, practices, and procedures. We also discussed industry standards organizations, including ANSI, IETF, ISO, NIST, RSA Labs, W3C, and X9 who have all published PKI-related standards. While some businesses rely entirely on industry standards, others feel compelled to develop and maintain their own internal standards. Regardless whether a business depends on external standards, internal standards, or both, standards play a special role between policies and practices.
Policy statements are basically high-level requirements, essentially goals that define “what” needs to be achieved. Practices are fundamentally ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access