---
sourceDocument: Australia IT Operations Management
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/it-operations-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia IT Operations Management

ft:clusterId :

    - itom

bundleId :

    - itom

workflow :

    - Technology


---

# Risk indicator definitions

# Risk indicator definitions {#ariaid-title1}

Release version: Australia  
Updated December 19, 2024  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Risk indicators are used to identify security vulnerabilities and compliance issues in cryptographic assets.

## Certificate risk indicators {#risk-indicator-definitions__supported-risk-indicators}

{#risk-indicator-definitions__supported-risk-indicators__entry__3}

| Risk Indicator | Description | Detection Criteria |
|-|-|-|
| Weak algorithm | Certificate uses cryptographic algorithms that are deprecated or considered weak by current security standards | MD5, SHA-1, RSA \< 2048 bits, DSA \< 2048 bits, DES, 3DES, RC4 |
| Trusted CA risk | Certificate is not issued by a trusted certificate authority or has CA-related trust issues | Self-signed certificate, CA not in trusted root store, or CA not in organizational trust policy |
| No owner | Certificate has no identified owner or responsible party | Owner field is empty or not assigned |
| No environment | Certificate lacks environment classification | Environment field is empty or not specified |
| No renewal process | Certificate has no defined renewal process or workflow | No renewal process documented or automated workflow configured |
[ ]

## Key risk indicators {#risk-indicator-definitions__key-risk-indicators}

{#risk-indicator-definitions__table_ucs_tjf_1kc__entry__3}

| Risk Indicator | Description | Applies to |
|-|-|-|
| Weak algorithm | Key uses a weak or insufficient algorithm or key size | AWS KMS keys, Azure Key Vault keys |
| Not PQC ready | Key does not use a post-quantum-safe algorithm | AWS KMS keys, Azure Key Vault keys |
| Not rotated | Key has not been rotated within the recommended period | AWS KMS keys |
| Pending deletion | Key is scheduled for deletion | AWS KMS keys |
| Expired | Key is expired or lacks a proper expiration date | Azure Key Vault keys |
[ ]

{#risk-indicator-definitions__table_ucs_tjf_1kc}