Join SecureWorld for a candid conversation with Chris Ghantous of Entrust on moving from protecting critical keys to governing cryptography across the enterprise.
Most organizations have solved the hardest part of cryptography. Their critical keys sit in certified hardware, behind controls auditors rarely question. Yet, ask a simpler question—where is cryptography used across the enterprise, and who owns it?—and few can answer confidently.
That gap is widening, and two forces are about to expose it. Keys, certificates, secrets, and cryptography embedded in applications, cloud services, and CI/CD pipelines have multiplied across teams with no shared tools, policy, or inventory. AI is accelerating that sprawl. Autonomous agents and AI workloads are creating machine identities and credentials faster than any manual process can track, and each one depends on cryptography someone must govern. Meanwhile, the post-quantum transition asks a question few can answer: how far along are you? The hard part of PQC was never the new algorithms; it's finding the cryptography you already have.
This conversation picks up where hardware protection ends: why a hardware root of trust remains non-negotiable, why it was never designed to govern an estate this distributed, and how discovery, ownership, and continuous evidence turn protected keys into a managed cryptographic estate.
We'll explore:
Why control gaps form, even in well-run security programs
What a Cryptographic Bill of Materials (CBOM) contains, and why, much as an SBOM exposes software supply chain risk, a CBOM makes cryptographic risk measurable
How AI and agentic workloads multiply cryptographic assets faster than teams can govern them
Where to realistically start on post-quantum readiness
How to build on existing cryptographic investments
For security leaders, PKI and infrastructure teams, compliance and audit stakeholders, and anyone accountable for cryptography they didn't deploy.
Attendees are eligible to receive 1 CPE credit.