Secrets, keys and device trust

Elements

The pieces this function usually contains in a large organisation:

• Device enrolment and revocation
• Key rotation
• Signed configuration

Catalog items that already cover part of it

• Device registry & revocation MULTI-0008
• Driver device revocation CONN?-0202
• Launcher signing key rotation LNCH-0050
• Launcher revoked key list LNCH-0051

Classification

Status

Present in catalog

Fit

Core candidate

Suggested module

SEC: Security, Audit & Privacy

Suggested attributes

Lite and Pro; priority Standard; always offline. Starting points only.

Cluster

Loss prevention, security and risk

Public excerpts

domain analysis

Archetypes and companies

Banks and credit unions; Big-box, warehouse club and mass merchants; Aerospace, defense and government contractors.

Example companies in these archetypes: JPMorgan Chase, Bank of America, Wells Fargo, Citigroup, U.S. Bancorp, Walmart, Costco, Target, Sam's Club, BJ's Wholesale Club, Meijer, Boeing. These come from general knowledge unless a source code is shown on the archetype page; it is not a statement that each company runs every element, and it implies no relationship.

Closest industry pages

• Banking, credit unions and cooperative banks
• Payments, remittance and money services
• Securities, asset management and diversified financials
• Savings groups, cooperatives and microfinance
• General merchandise and big-box stores
• Grocery and supermarkets
• Aerospace and defense
• Construction and engineering
• Professional and business services

Previous: Card data scope reduction (tokenisation, P2PE-style). Next: Incident response and breach notification playbooks.

Status is a hand review against catalog names and descriptions and can be wrong. See the method.