A survey was conducted by Ponemon Institute, sponsored by Keyfactor, to understand the challenges and costs of managing cryptographic keys and digital identities. The report analyzed five scenarios related to unsecured digital identities, including the operational and compliance costs of failures, the cost of security exploits, and the likelihood of these issues occurring in the next two years. On average, the report found that organizations will likely experience unplanned outages due to expired certificates costing $11.1 million, failed audits or compliance issues costing $14.4 million, server or code signing certificate misuse costing $13.4-15 million, and compromise by rogue certificate authorities costing $13.2 million.

1. A survey was conducted by Ponemon
Institute, sponsored by Keyfactor,
to understand the challenges and
costs facing organizations in the
protection and management of
cryptographic keys and digital
identities.
The Impact of Unsecured Digital
Identities report includes the
results of this survey for five
scenarios, including the
operational and compliance costs,
the cost of security exploits, and
the likelihood of occurring in the
next two years.
Cost for Failed
Certificate
Management
Practices
socradar.io
INTRODUCTION
The Incidents that Organizations are Probably will Experience over the
Next Two Years and Their Average Cost
$11.1
million
unplanned
outages due to
certificate
expiration
%30
%42
failed audits or
compliance due to
undocumented or
unenforced key
management
policies or
insufficient key
management
practices
$14.4
million
$13.4
million
%39server
certificate and
key misuse
$15
million
%29code signing
certificate and
key misuse
$13.2
million
Certificate
Authority (CA)
compromise or
rogue CA for man-
in-the-middle
(MITM) and
phishing attacks
%32
SOCRadar provides an “SSL Overview
Report” by discovering and classifying
your SSL certificates based on
certification authorities, cipher
suites, signature algorithms and lets
you track any malicious changes,
expiry or vulnerabilities to mitigate
the impact of a possible cyber attack.
Monitor SSL/TLS certificates
at global scale.
www.socradar.io