Topic starter
25/06/2026 2:56 pm
TL;DR: Continuous verification, not one-time login or boundary trust, is the finding DigiCert highlights for digital trust. IAM governance has to extend beyond users to devices, software and documents, or the trust model stays incomplete.
Editorial analysis by NHI Mgmt Group, based on content published by DigiCert: “How Zero Trust Can Enable Digital Trust”.
By the numbers:
- 96% of IT security executives believe that PKI is essential to building a zero-trust architecture.
Key questions
Q: Why do PKI and certificate management matter to zero trust programmes?
A: Because certificates are part of the proof that a user, device or service is legitimate, and they also protect the communications that carry that proof.
Q: What breaks when organisations keep using perimeter-era trust assumptions?
A: Trust becomes location-based instead of identity-based, which creates blind spots across remote work, cloud services and connected devices.
A: Organisations should treat identity governance and administration as a control plane for access decisions, not just a compliance layer.
Practitioner guidance
- Map trust decisions across actor types Document where humans, service accounts, devices, software and documents enter trust decisions, then align the control owner for each path.
- Treat PKI as identity infrastructure Place certificate issuance, renewal, revocation and validation under the same governance discipline used for other identity credentials.
- Replace network-based trust assumptions Remove policies that grant confidence because a request came from a known IP range, subnet or internal location.
Bottom line: Digital trust depends on continuous verification, not on inherited confidence from a network boundary or a one-time login.
Glossary terms: Digital Trust, Zero Trust, Public Key Infrastructure, Certificate Lifecycle Management
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 17 hours ago by NHI Mgmt Group
25/06/2026 4:10 pm
Digital trust is becoming an identity governance outcome, not a branding term. The article is correct to tie digital trust to zero trust because trust now depends on continuously verifiable identity signals across humans, machines and content. That means IAM and NHI governance teams should stop treating trust as a static state and manage it as an enforced verification pattern across every access path.
A few things that frame the scale:
- 90% of IT leaders say properly managing NHIs is essential for a successful zero-trust implementation, according to the Ultimate Guide to NHIs.
A question worth separating out:
Q: Who should own zero trust and digital trust governance?
A: Ownership should sit across identity security, infrastructure, and risk, with clear accountability for the trust controls that span them. Human IAM, NHI governance, and certificate lifecycle management cannot be governed as separate programmes if the business relies on a single trust posture. Shared accountability is the only durable model.
👉 Read our full editorial: Zero trust as the operating model for digital trust