---
sourceDocument: Australia IT Operations Management
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/it-operations-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia IT Operations Management

ft:clusterId :

    - itom

bundleId :

    - itom

workflow :

    - Technology


---

# Explore

# Exploring Cryptographic Asset Compliance {#ariaid-title1}

Release version: Australia  
Updated August 11, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read
Summarize  
![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI  
This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.  

## Summary of Exploring Cryptographic Asset Compliance

Cryptographic Asset Compliance offers ServiceNow customers centralized visibility and control over cryptographic assets to proactively assess risks and prepare for post-quantum cryptography (PQC) challenges.
As quantum computing threatens traditional cryptographic algorithms, this solution helps organizations inventory cryptographic assets such as certificates and cloud keys (AWS KMS, Azure Key Vault) across both cloud and on-premises environments.
This comprehensive inventory supports PQC readiness assessments and migration strategy planning.
Show full answer Show less  

## Key Features

* **Automated Discovery:** Integrates with ServiceNow Certificate Inventory and Management and Discovery tools to identify cryptographic assets across environments, syncing them regularly into Cryptographic Asset Compliance.
* **Risk Assessment:** Identifies risk indicators including weak or quantum-vulnerable algorithms, certificate authority trust issues, and ownership gaps. AI-generated summaries and recommendations facilitate understanding of asset risks.
* **Monitoring and Reporting:** Provides dashboards to track cryptographic asset health, PQC compliance status, and vulnerability trends, enabling ongoing oversight and remediation planning.
* **Role-Based Access:** Different user roles support tailored interactions, from configuration and asset management to monitoring and compliance reporting.

## User Roles and Responsibilities

* **SecOperations Engineer:** Uses inventory visibility to identify vulnerable keys and certificates, monitor asset health, and prioritize remediation for PQC migration.
* **Compliance and Governance Manager:** Generates audit-ready reports detailing cryptographic assets and quantum risk exposure to fulfill regulatory compliance and track policy adherence.
* **PKI Engineer:** Manages certificate lifecycle, configures discovery sources, defines risk indicators, and monitors expirations to ensure cryptographic governance and operational continuity.

## Benefits for ServiceNow Customers

* **Comprehensive Asset Inventory:** Establishes a trusted, current inventory of cryptographic assets by configuring discovery and trusted certificate authorities.
* **Risk and PQC Readiness Monitoring:** Enables continuous tracking of cryptographic asset health, detection of vulnerabilities, and assessment of PQC preparedness to guide remediation and compliance efforts.
* **Role-Specific Interfaces:** Provides user interfaces and permissions tailored to distinct roles, ensuring appropriate access for configuration, monitoring, and reporting activities.

## Next Steps

ServiceNow customers can deepen their understanding by exploring related topics such as post-quantum cryptography fundamentals, cryptographic risk indicators, and Policy as Code Engine policies to enhance compliance and risk management strategies.  
Cryptographic Asset Compliance provides centralized visibility and control of cryptographic assets for proactive risk assessment and post-quantum cryptography (PQC) readiness.

## Cryptographic Asset Compliance overview {#exploring-CAC__cf-exploring-parent-overview}

As quantum computing advances are anticipated to threaten traditional cryptographic algorithms, organizations need comprehensive visibility into their cryptographic assets. Cryptographic Asset Compliance addresses this challenge by automatically inventorying cryptographic assets like certificates, AWS KMS keys, and Azure Key Vault keys across cloud and on-premises environments. This visibility helps you assess your PQC readiness and plan migration strategies.{#exploring-CAC__exploring-cad-overview-p-2}

## Cryptographic Asset Compliance workflow {#exploring-CAC__cad-workflow}

The typical workflow when implementing Cryptographic Asset Compliance includes the following activities:

1. Set up discovery: Set up certificate discovery in ServiceNow [Certificate Inventory and Management](https://www.servicenow.com/docs/spvuK_B_Qgig4Tb2NhVESA "With Certificate Inventory and Management, you can discover, conduct an inventory, and proactively manage all TLS certificates. Certificate Inventory and Management supports IPv6, providing comprehensive coverage for your certificate management needs.") and cloud discovery in ServiceNow [Discovery](https://www.servicenow.com/docs/apkxXss6z1oF4qPT5Bq0Vw "ServiceNow Discovery is an automated process that continuously scans and identifies all the components within the IT infrastructure. It plays a crucial role in maintaining an accurate and up-to-date CMDB 360 with the information it finds.") (for AWS and Azure) so cryptographic assets can be found. A scheduled job then syncs the discovered assets into Cryptographic Asset Compliance.
2. Review inventory: Analyze discovered cryptographic assets in the inventory, including certificates and keys across all connected sources.
3. Assess risks: Review the risk indicators identified for your assets, such as weak or quantum-vulnerable algorithms and certificate authority trust or ownership gaps. Use the AI-generated summary and recommendations to understand each asset's risk.
4. Monitor and maintain: Use dashboards to track cryptographic asset health, PQC compliance status, and quantum vulnerable algorithms.
{#exploring-CAC__ol_workflow}

## Cryptographic Asset Compliance users {#exploring-CAC__cf-exploring-parent-users}

{#exploring-CAC__table_cad_users__entry__2}

| User | Description |
|-|-|
| SecOperations Engineer | Need visibility into cryptographic asset inventory to identify keys and certificates for PQC migration planning. They monitor asset health, identify vulnerable algorithms, and prioritize remediation. |
| Compliance and Governance Manager | Require audit-ready reports of cryptographic assets and quantum risk exposure to meet regulatory requirements. They generate compliance reports, track policy adherence, monitor risk indicators, and document remediation efforts. |
| PKI Engineer | Manage certificate life cycle, configure discovery sources, define risk indicators, and monitor certificate expiration. They contribute to proper cryptographic asset governance and operational continuity. |
[ ]

{#exploring-CAC__table_cad_users}

## Cryptographic Asset Compliance benefits {#exploring-CAC__cf-exploring-parent-benefits}

{#exploring-CAC__table_cad_benefits__entry__3}

| Benefit | Method | Users |
|-|-|-|
| Establish a trusted, up-to-date inventory of cryptographic assets and monitor its risk and PQC readiness by configuring asset discovery and the certificate authorities your organization trusts. | * [Configuring the discovery of cryptographic assets](https://www.servicenow.com/docs/pvL0S24SQh5DQSxI2FZYNA "Configuring the discovery of cryptographic assets involves setting up certificate and cloud discovery.") * [Configure trusted certificate authorities](https://www.servicenow.com/docs/K9uRIIq3PUSAu8EupSktTw "Configure certificate authorities (CAs) that your organization trusts and activate the certificate authority trust policy so that certificates from other authorities are flagged as untrusted.") * [Cryptographic Asset Compliance Home page](https://www.servicenow.com/docs/jE6CDTvVFSGp0dGaxFGt0w "The Cryptographic Asset Compliance Home page provides centralized visibility into cryptographic asset health, risk indicators, key metrics, and actionable insights for proactive compliance management.") * [View and manage cryptographic assets](https://www.servicenow.com/docs/SDaZcJkW5sdviVLcSfHpbA "View details of cryptographic assets and filter the data to focus on specific assets, analyze risk indicators, and export details from the Inventory page.") * [View cryptographic asset details](https://www.servicenow.com/docs/RRPRRob5u__u~uBww~R4ng "View detailed information about an individual cryptographic asset, including its risk indicators, cryptographic properties, AI-generated insights, and dependencies.") {#exploring-CAC__ul_wlf_nlh_1kc} | Cryptographic Asset admin sn_itom_cac.admin |
| Monitor the health of cryptographic assets, investigate risk indicators, and track PQC readiness to support remediation and compliance planning, using read access that doesn't change configuration. | * [Cryptographic Asset Compliance Home page](https://www.servicenow.com/docs/jE6CDTvVFSGp0dGaxFGt0w "The Cryptographic Asset Compliance Home page provides centralized visibility into cryptographic asset health, risk indicators, key metrics, and actionable insights for proactive compliance management.") * [View and manage cryptographic assets](https://www.servicenow.com/docs/SDaZcJkW5sdviVLcSfHpbA "View details of cryptographic assets and filter the data to focus on specific assets, analyze risk indicators, and export details from the Inventory page.") * [View cryptographic asset details](https://www.servicenow.com/docs/RRPRRob5u__u~uBww~R4ng "View detailed information about an individual cryptographic asset, including its risk indicators, cryptographic properties, AI-generated insights, and dependencies.") | Cryptographic Asset user sn_itom_cac.user |
[ ]

{#exploring-CAC__table_cad_benefits}

## What to explore next {#exploring-CAC__cf-exploring-parent-links}

* [Post-quantum cryptography overview](https://www.servicenow.com/docs/IAYqQgxFVCoC6xay1AjIYA "Post-quantum cryptography (PQC) represents new encryption algorithms that can strongly resist quantum computer attacks, addressing the urgent need for quantum-resistant security.")
* [Cryptographic risk indicators](https://www.servicenow.com/docs/OeK8h2ty7ygHhYzLjecTIQ "Risk indicators highlight cryptographic assets that need attention so you can prioritize remediation and track compliance.")
* [About Policy as Code Engine policies](https://www.servicenow.com/docs/W4nQbVeuj1SNWRJN3m5ztQ "Cryptographic Asset Compliance uses Policy as Code Engine (PaCE) policies to evaluate your cryptographic assets and flag risk.")
{#exploring-CAC__ul_bby_zhs_bkc}