Governance disciplines for PKI
Trust Architecture Playbook: Governance pillar
Certificate lifecycle management and PKI governance is not one control. It's a set of disciplines that, together, determine who can issue or manage a certificate or CA source, and whether the resulting certificates can be trusted to do what they claim. This section defines governance disciplines that apply across both public-trust and private-trust certificate populations.