Name: From risk to revenue: The business case for compliance
Start: 2026-01-12T20:31:00Z
End: 2026-01-12T20:31:51.000Z
Location: BrightTALK

DigiCert is a global leader in intelligent trust. We protect the digital world by ensuring the security, privacy, and authenticity of every interaction. Our AI-powered DigiCert ONE platform unifies PKI, DNS, and certificate lifecycle management, to secure infrastructure, software, devices, messages, AI content and agents. Learn why more than 100,000 organizations, including 90% of the Fortune 500, choose DigiCert to stop today’s threats and prepare for a quantum-safe future at www.digicert.com.

With hybrid work, the new normal every device (laptop, mobile, or desktop)—needs secure, seamless certificate enrollment and renewal. Manual processes introduce risk, complexity, and compliance gaps. 

In this session, see how automation standardizes user and device certificate management to strengthen identity assurance, enforce policy, and deliver seamless access—while laying the foundation for zero-trust security and future cryptographic needs.

Part 8 – Endpoints in Sync: Automating User and Device Certificates

Managing certificates across load balancers, WAFs, and reverse proxies is time-consuming, and with shorter lifespans and stricter compliance, manual processes no longer scale.

In this session, see how DigiCert Trust Lifecycle Manager automates certificate provisioning, renewal, and deployment across application delivery environments. Learn how zero-touch, policy-driven workflows reduce risk, prevent outages, and keep applications secure—without manual effort.

Part 7 – Certificates on Autopilot: Automating Provisioning and Renewal

As organizations adopt Infrastructure as Code, manually managing certificate lifecycles no longer scales. Shorter validity periods, stricter compliance requirements, and distributed cloud environments have made PKI automation essential.

In this session, DigiCert and HashiCorp experts show how integrating DigiCert Trust Lifecycle Manager with the Terraform Provider enables secure, policy-driven certificate provisioning, renewal, and revocation—directly within DevOps pipelines.

Part 6 - Automating PKI: Vault Plugin & Terraform

Managing secure web redirects has long been manual and error-prone, with certificate issuance, validation, and renewal creating unnecessary risk and downtime.

In this session, see how DigiCert’s automated HTTPS Web Forwarding in CertCentral eliminates manual steps by automating the full TLS certificate lifecycle. Learn how DigiCert’s Global Anycast network delivers resilient, high-performance redirects, and how to manage them flexibly through UI and API.

Part 5 - DNS Goes Ultra: Automating Domain Control for Certificate Issuance

Getting started with certificate automation means understanding which tools fit your environment—and where they may fall short at scale.

In this session, learn how to automate certificate issuance and renewal using Certbot, one of the most widely used open-source ACME clients. You’ll also see where enterprise-grade automation adds value, and how DigiCert’s automation client extends visibility, governance, and integration beyond open-source tools.

Part 1 - Getting Started with Automation Clients

The Cyber Resilience Act sets mandatory requirements for manufacturers to implement cybersecurity risk management, produce and maintain SBOMs and manage vulnerabilities across the product lifecycle. This session explains obligations and shows practical ways to embed resilience in development and deployment pipelines. It also highlights how preparing now supports readiness for future regulations such as the AI Act, creating innovation and business advantage. 

Key Takeaways:
 • Understand CRA requirements for software and device makers.
 • Learn how SBOM and vulnerability handling affect compliance.
 • See examples of compliance by design practices in action.
 • Foresight into upcoming regulations and frameworks, such as the AI Act.

Preparing for CRA: What Manufacturers, Developers, and Security Leaders Need to Know

The latest DigiCert RADAR data reveals more than attack trends, it exposes how the global internet is shifting beneath the surface. 
From coordinated botnet takedowns to sovereign DNS networks and the surge of hyperscale traffic events, these signals show where resilience, control, and trust are being redefined. 

In this insightful 30-minute fireside briefing, DigiCert experts share key highlights from this quarters Threat Intelligence Brief, decoding what’s driving the change and how organisations can strengthen digital trust across networks, applications, and DNS. 

Gain insights on: 
- How coordinated botnet takedowns are reshaping attacker behaviours, and what that means for the stability of global infrastructure 
- What the acceleration of sovereign DNS initiatives in Russia and China signals for digital trust, visibility, and governance 
- How mega-scale traffic events, including the Aisuru botnet, are testing the limits of resilience across interconnected systems

DigiCert RADAR: Threat Intelligence Signals Redefining Global Resilience

What makes SBOMs so essential? And how can organisations determine their role in meeting regulatory demands? While regulations may differ in specifics, they all share a common goal: fostering transparency, accountability, and security within your software 

In this webinar, we’ll explore how regulations like DORA, NIS2, and PCI DSS 4.0 are driving the need for software transparency and how SBOMs empower organisations.

The Role of SBOMs in Modern Software Development - Unlocking Compliance

This is the first session in our four-part series designed to deliver hands-on guidance for certificate automation focused on the tools and workflows IT and security teams use every day.

In this 30-minute session, we’ll lay the foundation for automating certificate management by walking through the installation and configuration of Certbot, one of the most widely used open-source ACME clients. 
We’ll also introduce DigiCert’s automation agent and examine where commercial solutions provide additional value to meet enterprise needs for scalability, governance, and integrations. 

In this session, you’ll learn: 
• How to install and configure Certbot  
• What’s required to execute certificate issuance and renewal with Certbot 
• When open-source ACME clients are a good fit—and when they may introduce risk or operational overhead 
• How DigiCert’s automation client extends control, visibility, and enterprise-grade integration

EMEA Automation Series Season 1 - Part 1: Getting Started with Automation Clients

This is the second session in our four-part series focused on making certificate automation real—with side-by-side walkthroughs of what works, what breaks, and what scales. In this 30-minute session, we explore how to automate the DNS-01 challenge, comparing DIY methods using Certbot and API tokens with a fully integrated solution from DigiCert and UltraDNS. 

As certificate and domain validation lifetimes continue to shrink—dropping to 200 days in 2026 and as low as 10 days for DCV reuse by 2029—manual methods simply can’t keep up. We’ll show you how automation helps you stay ahead of these changes and avoid costly validation errors, failed renewals, and outages.  

You’ll see how teams using open-source tools like Certbot with the UltraDNS DNS plugin can get started quickly—but also where those approaches run into limitations. Then we’ll demonstrate how the DigiCert + UltraDNS integration simplifies and scales certificate automation by handling DNS challenges behind the scenes, with no scripting required.  

In this session, you’ll learn:  
• How DNS-01 domain validation works using Certbot and UltraDNS 
• Where DIY automation falls short as validation cycles accelerate 
• How DigiCert and UltraDNS automate certificate issuance and DNS validation end-to-end 
• Why CAB Forum changes make automation critical for staying compliant 
• How to build scalable DNS validation workflows across business units and environments

EMEA Automation Series Season 1 - Part 2: Automating DNS-01: Certbot DNS Plugin vs. Full DigiCert + UltraDNS Integration

Cloud-native environments spanning containers, VMs, and distributed workloads, require reliable certificate management.  As certificate sprawl accelerates, the risk of outages and vulnerabilities grows. DevOps and security teams need a unified way to automate PKI without slowing development.  

In this session, you’ll see how DigiCert automation integrates with cloud vaults and infrastructure as code tools to issue, renew, and deploy certificates at scale. Learn how to protect dynamic workloads, streamline DevOps pipelines, and build agility for tomorrow’s cryptographic requirements. 

Why Attend: See how to align fast-moving distributed workloads with strong security controls, reduce outage risks from mismanaged certificates, and simplify PKI for cloud-native environments.

EMEA Automation Series Season 1 - Part 3: Beyond ACME: Automating Certificate Management in Complex Environments (EMEA)

Many organisations use public TLS certificates for internal applications and systems where they aren't strictly needed leading to unnecessary costs and certificate lifecycle rules. In this webinar, we’ll explore real-world scenarios where organizations relied on public certificates but achieved greater efficiency, control, and scalability by transitioning to internal PKI. 

We’ll also discuss the trade-offs and considerations of internal PKI like deployment and maintenance costs and demonstrate best practices, including how  DigiCert’s PKI as a Service  can streamline internal certificate management without compromising security or compliance. 

In this session, you’ll learn: 
- Common use cases where public TLS certificates are used unnecessarily 
- Tradeoffs and benefits of using internal PKI 
- Best practices for internal PKI management to mitigate complexity and cost 
- How to implement a scalable and secure internal PKI using  DigiCert’s PKI as a Service 

Who should attend: IT and security leaders responsible for certificate management, especially those managing high volumes of internal certificates or seeking to optimise their PKI strategies in complex environments. 

In this session, you’ll see how automation brings consistency to user and device certificate management. Learn how to strengthen identity assurance, enforce policies, and deliver frictionless access experience while laying the groundwork for zero-trust security and future cryptographic requirements.

EMEA Automation Series Season 1 - Part 4: Optimising Trust Strategies: When to Choose Internal PKI Over Public TLS

The reliance of development teams on open-source components is undeniable. It helps organizations get their software solutions to market sooner and free their engineers to focus on building intellectual property instead of “plumbing”. 

Open-source projects are also an attack vector when bad actors compromise the open-source by injecting malware or developers unknowingly include releases with exploitable vulnerabilities. 

Join Dave Roche, Director of Software Trust at DigiCert, as he shares the 5 best habits for securing your software supply chain from vulnerable or malicious open-source code.

5 Habits to Avoid Security Flaws in Open-Source Software

What makes SBOMs so essential? And how can organizations determine their role in meeting regulatory demands? While regulations may differ in specifics, they all share a common goal: fostering transparency, accountability, and security within your software 

In this webinar, we’ll explore how regulations like DORA, NIS2, and PCI DSS 4.0 are driving the need for software transparency and how SBOMs empower organizations.

Unlocking Compliance: The Role of SBOMs in Modern Software Development

The regulatory landscape is evolving fast, with frameworks like NIS2, eIDAS, the Digital Operational Resilience Act, and the EU Cyber Resilience Act (CRA) setting new expectations for cybersecurity, digital trust, and operational resilience.

For organisations operating across borders, understanding what these changes mean and how to respond is essential. Join experts from DigiCert and Nimbus as they break down key EU regulations and discuss how businesses can build agile, forward-looking compliance strategies.

This session will help you stay ahead of regulatory shifts and ensure your organisation is prepared for what’s coming.

Regulatory Overload? Strategies Navigating NIS2, eIDAS, CRA & More

In this panel discussion, developers and engineering leaders dive into DZone’s June Trend Report to unpack the most pressing challenges in software supply chain security—from zero trust and cloud postures to open-source governance. You’ll hear how teams are navigating risk, privacy, and compliance across the SDLC, and walk away with practical insights you can apply today.

Software Supply Chain Security: Enhancing Trust, Resilience Across Software Development Lifecycle

This is the first session in our four-part series designed to deliver hands-on guidance for certificate automation focused on the tools and workflows IT and security teams use every day.
In this 30-minute session, we’ll lay the foundation for automating certificate management by walking through the installation and configuration of Certbot, one of the most widely used open-source ACME clients. 
We’ll also introduce DigiCert’s automation agent and examine where commercial solutions provide additional value to meet enterprise needs for scalability, governance, and integrations. 

In this session, you’ll learn: 
• How to install and configure Certbot  
• What’s required to execute certificate issuance and renewal with Certbot 
• When open-source ACME clients are a good fit—and when they may introduce risk or operational overhead 
• How DigiCert’s automation client extends control, visibility, and enterprise-grade integration

Part 1 - Getting Started with Automation Clients: Open Source and Commercial Options

How can CISOs and security leaders transform regulatory complexity into strategic advantage? Connecting compliance, digital trust, and board-level outcomes to protect revenue, safeguard reputation, and strengthen customer confidence and essential for board level discussion.

When you think of compliance, what’s in your mind? Red tape? Regulatory straightjackets? Bureaucracy? It’s not often organisations associate the acronym salad of PCI DSS, DORA, or NIS2 with strategic advantage, or executives make a case that there is a measurable return on investing in compliance.

Lakshmi Hanspal, Chief Trust Officer at DigiCert in conversation with The Register’s Tim Phillips about how CISOs and security leaders can turn compliance into competitive advantage. And build long term business value.

You will hear:
- How Digital Trust connects compliance to board-level goals
- The link between regulatory readiness and business performance
- Creating a repeatable framework for resilience and trust

From risk to revenue: The business case for compliance

Compliance

Cyber Security

Digital Trust

DigiCert

Regulations

Strategic Risk

Trust Lifecycle Manager

Cyber Resilience

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

From risk to revenue: The business case for compliance

Presented by

About this talk

DigiCert