Guide · 7 min read
Device identity from manufacture to retirement
A practical architecture for provisioning, attestation, signed updates, recovery, and evidence across the life of a connected product.
Read the guideDevice & machine identity
Identify, update, isolate, and recover the systems you operate.
A device identity is useful when it survives the realities of manufacturing, deployment, maintenance, and incident response. These guides connect provisioning and attestation with the decisions to authorize, update, revoke, and retire a system.
Start with a question
Can you isolate one compromised system without breaking everything that depends on it?
- Trace an identity from enrollment to retirement.
- Test recovery and revocation under real operating conditions.
- Separate approval thresholds from a complete review record.
Guides & field notes
Field note · 5 min read
When quorum closes the conversation too early
A proposed approval pattern that preserves a binding decision and the full review record for trust lists, signing releases, and other consequential changes.
Read the field noteWhere the subjects connect
Guide · 7 min read
PKI operations: from renewal alerts to a managed service
Build certificate operations that can handle shorter lifetimes, changing trust policies, and the next algorithm transition.
Read the guidePractical guide · 6 min read
Software assurance: make the product evidence usable
A practical operating model for secure releases, vulnerability response, and EU Cyber Resilience Act readiness.
Read the practical guidePractical guide · 5 min read
Funding digital trust with your own evidence
Build a decision around operating costs, required capabilities, and testable risk reduction. Make every assumption visible.
Read the practical guideRelated writing
- A Cyberattack Forced Supermarkets to Destroy Food. The Bill Could Reach Tens of Millions.
France’s refrigeration attack hit about 700 supermarkets. What manufacturers need to learn about remote access, local control and OT security.
- The 24-Hour Clock Is Already Running
CRA reporting duties are live. Can your team identify affected product versions and file an early warning within 24 hours of awareness?
- Beyond the OT isolation assumption
Forescout’s segmentation findings challenge the assumption that OT is isolated. NIST’s new draft shows how stronger architecture, device identity, trusted updates, and tested recovery can narrow the gap.