--- sourceDocument: Brazil IT Operations Management sourceDocumentLink: https://www.servicenow.com/docs/r/it-operations-management Release : - brazil ft:locale : - en-US ft:publication_title : - Brazil IT Operations Management ft:clusterId : - itom bundleId : - itom workflow : - Technology --- # Explore # Exploring Cryptographic Asset Compliance {#ariaid-title1} Release version: Brazil Updated September 10, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read Cryptographic Asset Compliance provides centralized visibility and control of cryptographic assets for proactive risk assessment and post-quantum cryptography (PQC) readiness. ## Cryptographic Asset Compliance overview {#exploring-CAC__cf-exploring-parent-overview} As quantum computing advances are anticipated to threaten traditional cryptographic algorithms, organizations need comprehensive visibility into their cryptographic assets. Cryptographic Asset Compliance addresses this challenge by automatically inventorying cryptographic assets like certificates, AWS KMS keys, and Azure Key Vault keys across cloud and on-premises environments. This visibility helps you assess your PQC readiness and plan migration strategies.{#exploring-CAC__exploring-cad-overview-p-2} ## Cryptographic Asset Compliance workflow {#exploring-CAC__cad-workflow} The typical workflow when implementing Cryptographic Asset Compliance includes the following activities: 1. Set up discovery: Set up certificate discovery in ServiceNow [Certificate Inventory and Management](https://www.servicenow.com/docs/18rx6Oipso8pms1aZVuQ4w "With Certificate Inventory and Management, you can discover, conduct an inventory, and proactively manage all TLS certificates. Certificate Inventory and Management supports IPv6, providing comprehensive coverage for your certificate management needs.") and cloud discovery in ServiceNow [Discovery](https://www.servicenow.com/docs/Smzl3xy7DdEgCkn84_DN3w "ServiceNow Discovery is an automated process that continuously scans and identifies all the components within the IT infrastructure. It plays a crucial role in maintaining an accurate and up-to-date CMDB 360 with the information it finds.") (for AWS and Azure) so cryptographic assets can be found. A scheduled job then syncs the discovered assets into Cryptographic Asset Compliance. 2. Review inventory: Analyze discovered cryptographic assets in the inventory, including certificates and keys across all connected sources. 3. Assess risks: Review the risk indicators identified for your assets, such as weak or quantum-vulnerable algorithms and certificate authority trust or ownership gaps. Use the AI-generated summary and recommendations to understand each asset's risk. 4. Monitor and maintain: Use dashboards to track cryptographic asset health, PQC compliance status, and quantum vulnerable algorithms. {#exploring-CAC__ol_workflow} ## Cryptographic Asset Compliance users {#exploring-CAC__cf-exploring-parent-users} {#exploring-CAC__table_cad_users__entry__2} | User | Description | |-|-| | SecOperations Engineer | Need visibility into cryptographic asset inventory to identify keys and certificates for PQC migration planning. They monitor asset health, identify vulnerable algorithms, and prioritize remediation. | | Compliance and Governance Manager | Require audit-ready reports of cryptographic assets and quantum risk exposure to meet regulatory requirements. They generate compliance reports, track policy adherence, monitor risk indicators, and document remediation efforts. | | PKI Engineer | Manage certificate life cycle, configure discovery sources, define risk indicators, and monitor certificate expiration. They contribute to proper cryptographic asset governance and operational continuity. | [ ] {#exploring-CAC__table_cad_users} ## Cryptographic Asset Compliance benefits {#exploring-CAC__cf-exploring-parent-benefits} {#exploring-CAC__table_cad_benefits__entry__3} | Benefit | Method | Users | |-|-|-| | Establish a trusted, up-to-date inventory of cryptographic assets and monitor its risk and PQC readiness by configuring asset discovery and the certificate authorities your organization trusts. | * [Configuring the discovery of cryptographic assets](https://www.servicenow.com/docs/QJ3PrBx2Fg7ErVBepC8KHA "Configuring the discovery of cryptographic assets involves setting up certificate and cloud discovery.") * [Configure trusted certificate authorities](https://www.servicenow.com/docs/9niXVHExDp1rg7cxUsZfTg "Configure certificate authorities (CAs) that your organization trusts and activate the certificate authority trust policy so that certificates from other authorities are flagged as untrusted.") * [Cryptographic Asset Compliance Home page](https://www.servicenow.com/docs/Tydixqe_IRfcLaoyI1KV4A "The Cryptographic Asset Compliance Home page provides centralized visibility into cryptographic asset health, risk indicators, key metrics, and actionable insights for proactive compliance management.") * [View and manage cryptographic assets](https://www.servicenow.com/docs/43prYvAAPrqq2EbH3ZsP6w "View details of cryptographic assets and filter the data to focus on specific assets, analyze risk indicators, and export details from the Inventory page.") * [View cryptographic asset details](https://www.servicenow.com/docs/_oXPxHn9D3_oojmSiIm~BQ "View detailed information about an individual cryptographic asset, including its risk indicators, cryptographic properties, AI-generated insights, and dependencies.") {#exploring-CAC__ul_wlf_nlh_1kc} | Cryptographic Asset admin sn_itom_cac.admin | | Monitor the health of cryptographic assets, investigate risk indicators, and track PQC readiness to support remediation and compliance planning, using read access that doesn't change configuration. | * [Cryptographic Asset Compliance Home page](https://www.servicenow.com/docs/Tydixqe_IRfcLaoyI1KV4A "The Cryptographic Asset Compliance Home page provides centralized visibility into cryptographic asset health, risk indicators, key metrics, and actionable insights for proactive compliance management.") * [View and manage cryptographic assets](https://www.servicenow.com/docs/43prYvAAPrqq2EbH3ZsP6w "View details of cryptographic assets and filter the data to focus on specific assets, analyze risk indicators, and export details from the Inventory page.") * [View cryptographic asset details](https://www.servicenow.com/docs/_oXPxHn9D3_oojmSiIm~BQ "View detailed information about an individual cryptographic asset, including its risk indicators, cryptographic properties, AI-generated insights, and dependencies.") | Cryptographic Asset user sn_itom_cac.user | [ ] {#exploring-CAC__table_cad_benefits} ## What to explore next {#exploring-CAC__cf-exploring-parent-links} * [Post-quantum cryptography overview](https://www.servicenow.com/docs/lrtThkM9i1nbsI~QMtPoEQ "Post-quantum cryptography (PQC) represents new encryption algorithms that can strongly resist quantum computer attacks, addressing the urgent need for quantum-resistant security.") * [Cryptographic risk indicators](https://www.servicenow.com/docs/GNicn98GpPUx_7NkR8E7pw "Risk indicators highlight cryptographic assets that need attention so you can prioritize remediation and track compliance.") * [About Policy as Code Engine policies](https://www.servicenow.com/docs/3WFfWBZCa2ssSrqF0upIpA "Cryptographic Asset Compliance uses Policy as Code Engine (PaCE) policies to evaluate your cryptographic assets and flag risk.") {#exploring-CAC__ul_bby_zhs_bkc}