Dave Roche, Director of Product - Software Trust at DigiCert, explains how, all too often, people seem to treat keys - the most sensitive cryptographic assets an organisation possesses - as something to acquire and forget about - only looking for it when they’re actually required to sign code or decrypt something. That poses a huge security problem on its own, but on top of that, the direction of regulatory and technological change won’t let them do that for much longer, especially when we start thinking about Quantum threats, which will render most of the algorithms we use now completely vulnerable. Time to implement a comprehensive and futureproof key management and security certification strategy.