CLM 2.0: What's Deployed, What's Broken, What's Next
· 15:30 – 16:10 Amsterdam time · Blue hall
A year ago at the PQC Conference in Kuala Lumpur, this panel mapped the roadblocks on the path to post-quantum resilience. Twelve months on, the questions have shifted. Certificate lifetimes are collapsing toward 47 days. Post-quantum cryptography has moved from roadmap slide to operational planning under regulator and customer pressure. AI-driven workloads are beginning to demand identity at a scale traditional certificate lifecycle management was never built to support. Conversations inside CISO offices and architecture reviews have moved from strategy to deployment.
This session reconvenes the original panel for an implementation-grounded follow-up. The aim is to move past the vision and into the field: what is actually running in enterprise production today, where the new operational load is causing real failures, and what is getting torn out and rebuilt. Discussion will surface specifics: observed automation maturity across enterprise estates, failure modes under accelerated renewal cadence, and the trade-offs that emerge when crypto agility, hybrid PQC, and machine identity converge inside the same stack.
Most sessions on CLM and PQC remain at the level of strategy, principle, or capability inventory. This panel stays inside the operational reality: what works at scale, what fails first, and what the next architecture looks like once we accept that CLM is no longer an operations function but a control plane for trust. That reframe carries practical consequences: where policy lives, who owns PQC migration, how AI agent identities are issued and revoked at workload speed, and what resilience metrics should replace the older uptime-and-renewal dashboards.
The conversation is structured around four working areas: the breaking point of current approaches in a 47-day world; PQC and crypto agility as an operational discipline rather than a research topic; the architecture of a trust control plane, including how AI and autonomous workloads fit; and the business and risk reframe needed to fund and govern the shift. Attendees will leave with a clearer sense of where peer organizations actually stand on automation, PQC readiness, and machine identity scale, a working definition of what CLM 2.0 demands in practice, and a sharper view of the most expensive blind spots hiding inside today's deployments.
Speakers
- Board Chair · PKI Consortium
- Chief Security Officer · Keyfactor
As the Chief Security Officer at Keyfactor, I am at the forefront of advancing our position in digital trust and cybersecurity. My role centers on ensuring Keyfactor remains a leader of identity-first security solutions in the technical landscape of cryptographic infrastructure and digital certificates. With extensive experience in smart card management systems, PKI design, and directory services, I am committed to integrating the voice of the customer into our platform to drive innovative solutions and maintain our leadership in the evolving security landscape.
A key focus of my role is steering our PQC vision to ensure post-quantum cryptography (PQC) readiness and developing strategies for quantum computing challenges. We are proactively preparing for Q-Day by advancing our cryptographic solutions in alignment with NIST standards to enhance customers’ crypto-agility. This includes developing and implementing PQC migration strategies and ensuring our solutions are quantum ready.
At Keyfactor, my leadership is focused on enhancing digital trust through SaaS-delivered PKI solutions and certificate lifecycle automation software to support security teams of modern enterprises.
- Global Field CTO · AppViewX
Ganesh Mallaya is an accomplished cybersecurity leader at AppViewX, operating at the intersection of product innovation, industry standards, and enterprise adoption. He plays a key role in shaping both the evolution of cryptographic platforms and how organizations implement them in real-world environments, with a focus on Public Key Infrastructure (PKI), certificate lifecycle management, and post-quantum readiness.
As a field-facing technology leader, Ganesh works closely with CISOs and security leaders across global enterprises, acting as a trusted advisor on cyber risk, crypto-agility, and large-scale PKI transformation. His work goes beyond strategy—he actively influences product direction by bringing frontline customer challenges into the design of scalable, automation-first solutions that address modern cryptographic complexity.
Ganesh is an active contributor to global standards and industry initiatives, collaborating with the IETF, CA/Browser Forum, and the PKI Consortium. His contributions span areas such as ACME-based automation, device identity and attestation, and the advancement of hybrid and composite cryptographic models to support the transition to quantum-resistant security.
He is a frequent speaker at leading security and identity conferences, including BSides Seattle and International Cryptographic Module Conference, where he shares practitioner-driven insights on crypto-agility, PKI modernization, and the operational realities of post-quantum adoption. His perspective consistently highlights that the future of cryptography will be defined not just by algorithms, but by the ability to automate, adapt, and operate securely at scale.
- Head of PKI Strategy · Palo Alto Networks
George is the Head of PKI Strategy at Palo Alto Networks and represents the organization at the PKI Consortium.
- SVP of Enterprise Products · OmniTrust
Roman Cinkais has master degree from mathematical method of information security from Charles University in Prague. Roman has over 15 years of professional experience with a focus on information security IT projects across various industries (financial, retail, banking, telco, postal). Roman has profound knowledge of cyber security and risk management framework, regulation, and standards like GDPR, ISO, NIST, ANSI, PCI, ETSI, Common Criteria, and practical experience with integrated management system minimizing efforts for security controls and compliance.
Attendance
Open session · first come, first served
Saving interest does not reserve a seat. Admission remains first come, first served.
Save favorite
