---
sourceDocument: Brazil IT Operations Management
sourceDocumentLink: https://www.servicenow.com/docs/r/it-operations-management

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil IT Operations Management

ft:clusterId :

    - itom

bundleId :

    - itom

workflow :

    - Technology


---

# About Policy as Code Engine policies

# About Policy as Code Engine policies {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Cryptographic Asset Compliance uses Policy as Code Engine (PaCE) policies to evaluate your cryptographic assets and flag risk.

Policies evaluate cryptographic assets and raises a risk indicator when an asset meets a risk condition. Separate policies apply to certificates, AWS KMS keys, and Azure Key Vault keys. Note that some policies calculate the overall
risk level for an asset by combining the results of the other policies rather than raising an indicator of their own. For more information, see [Cryptographic Asset Compliance policies](https://www.servicenow.com/docs/nnSs2yatuIrbdUMpt_CpzA "Cryptographic Asset Compliance uses policies to evaluate cryptographic assets and flag risk. The policies are available on the Settings page.").

Most policies are active by default and run automatically, so you don't have to set them up. However, the certificate authority trust policy is inactive by default because it depends on the certificate authorities that your
organization trusts. You activate it after you add those authorities. For more information, see [Configure trusted certificate authorities](https://www.servicenow.com/docs/9niXVHExDp1rg7cxUsZfTg "Configure certificate authorities (CAs) that your organization trusts and activate the certificate authority trust policy so that certificates from other authorities are flagged as untrusted.").

## Managing policies {#policies-and-risk-indicators__section_z31_bm2_1kc}

You can manage policies using PaCE. You can activate or deactivate a policy and edit its configuration, including the risk criticality that it assigns and review or revert your changes. For more information, see [Manage PaCE
policies](https://www.servicenow.com/docs/access?context=pace-admin-manage-policies&version=brazil&pubname=brazil-servicenow-platform&ft:locale=en-US).  
Note:  
Because a change affects how risk is calculated for the assets that the policy evaluates, avoid changing a policy, other than adding trusted certificate authorities.