Beyond Discovery: Making Cryptographic Inventory Actionable
· 10:45 – 11:40 Amsterdam time · Red hall
PQC roadmaps and guidance, including the EU’s coordinated implementation roadmap and guidance from CISA, NSA, NIST, and the UK NCSC, emphasize discovery and inventory as foundations for migration. With several years of guidance and growing practical experience, what have organizations learned? Where is discovery enabling progress, and where does it risk becoming an exercise with no clear endpoint?
This panel examines how that guidance translates into practice and what cryptographic posture management requires beyond collecting findings.
The first question is scope: where does broad, exhaustive scanning add value, and where does it generate noise that slows everyone down? How should organizations decide where to point discovery tools first, when to expand coverage, and how to account for what remains outside scope?
The second is context. Software is updated, dependencies change, keys and certificates rotate, and cryptographic configurations evolve. An inventory can therefore become outdated quickly. How current does that view need to be, what context matters, and what does it take to maintain it?
The third is ownership. Cryptographic assets rarely belong to a single team, and their dependencies often extend into the supply chain. How should responsibility be divided among security teams, application owners, and suppliers, particularly when the organization identifying a risk cannot directly address it?
The fourth is what happens after the scan. Discovery tools can generate large volumes of findings, and a report nobody acts on is worth little. What determines which findings deserve attention, who should act, and whether the response has achieved its purpose?
Panelists will discuss what has worked, what has not, and where experience suggests that tooling, processes, or guidance need to evolve.
Speakers
- Chief Security Officer · Keyfactor
As the Chief Security Officer at Keyfactor, I am at the forefront of advancing our position in digital trust and cybersecurity. My role centers on ensuring Keyfactor remains a leader of identity-first security solutions in the technical landscape of cryptographic infrastructure and digital certificates. With extensive experience in smart card management systems, PKI design, and directory services, I am committed to integrating the voice of the customer into our platform to drive innovative solutions and maintain our leadership in the evolving security landscape.
A key focus of my role is steering our PQC vision to ensure post-quantum cryptography (PQC) readiness and developing strategies for quantum computing challenges. We are proactively preparing for Q-Day by advancing our cryptographic solutions in alignment with NIST standards to enhance customers’ crypto-agility. This includes developing and implementing PQC migration strategies and ensuring our solutions are quantum ready.
At Keyfactor, my leadership is focused on enhancing digital trust through SaaS-delivered PKI solutions and certificate lifecycle automation software to support security teams of modern enterprises.
Alexander Loew
Panelist- CEO · Data-Warehouse
Alexander is the CEO at Data-Warehouse GmbH and represents the organization at the PKI Consortium.
Itan Barmes
Panelist- Co-founder & Chief Strategy Officer · QIZ Security
Itan Barmes is a quantum physicist turned cybersecurity strategist. After earning his PhD in quantum physics, he moved into cryptography and cyber risk, first as a senior manager at Deloitte and now as co-founder and Chief Strategy Officer of Qiz Security. For over a decade he has advised global enterprises on rebuilding their cryptographic foundations to withstand emerging quantum threats. At Qiz Security he drives the company's mission to make post-quantum resilience practical, bridging deep science with real-world implementation. Known for challenging assumptions, he blends scientific rigor, cybersecurity experience, and entrepreneurial drive to help organizations build digital trust for the quantum future.
- Founder and CEO · Digitorus
Paul is the Founder and CEO at Digitorus and represents the organization at the PKI Consortium.
Attendance
Open session · first come, first served
Saving interest does not reserve a seat. Admission remains first come, first served.
Save favorite
