How do you keep your PKI skills and knowledge up to date in a changing environment?

Another great resource for upcoming changes in the industry is the CA Browser Forum. This body is comprised of the third-party CAs. They will have open periods of debate on changes to their guidance, and serve as a wealth of information about why changes are coming down the road.

To keep PKI skills and knowledge up to date in a changing environment, engage in continuous learning and professional development. Subscribe to cybersecurity journals and follow reputable blogs for the latest trends and threats. Participate in webinars, workshops, and conferences focused on PKI and cybersecurity. Join industry forums and communities to exchange knowledge with peers and experts. Pursue relevant certifications, like those from (ISC)2 or ISACA, to validate your skills. Stay current with standards and best practices from organizations like NIST and the CA/B Forum. Regularly review and practice with real-world scenarios to maintain and enhance your technical expertise.

To stay current with PKI skills and knowledge, regularly engage with industry updates through reputable sources like standards organizations (e.g., IETF, OASIS), attend relevant conferences and webinars, and participate in professional forums and discussions. Following developments in cryptographic research and updates from certificate authorities ensures awareness of emerging threats and technologies. Additionally, hands-on practice with new tools and technologies, along with ongoing education and training, helps maintain and enhance expertise in a rapidly evolving field.

CA Vendors are a great starting point as you can see what's happening in the industry. They are the organizations with "skin in the game" and reputations at stake, they will have the most current information. Certificate Lifecycle Management software vendors Venafi, KeyFactor, and AppViewX often have current news, resources, and training. Don't forget cloud vendors such as Azure (Microsoft), AWS (Amazon) and GCP (Google). PKI is an integral part of their services. Lastly, look at CA/Browser Forum and NIST for the nitty gritty details.

ISC2 certification courses require PKI and encryption as a domain for their certifications. Depending on the level of certification you are attempting will determine the level of knowledge needed in this area. Be sure to check the exam outlines for each certification, as PKI has been absorbed into other domains such as Security, Architecture, and Engineering.

Taking online courses and certifications is an effective way to advance your PKI skills. Platforms like Coursera, Udemy, and edX offer foundational courses on PKI and cryptography, while specialized certifications from vendors such as Microsoft, Cisco, CompTIA, and ISC2 provide deeper expertise in specific areas. These educational resources cater to various levels and budgets, helping you stay updated and demonstrate your proficiency in PKI.

In the early to mid 2000's you just needed to provide a secure PKI infrastructure. In 2023 you need to provide one that also is user intuitive and provides easily seen value to the customer. To do this it is imperative that you stay up to date with tools. Specifically the newest tools in use that are automating PKI tasks.

Experimenting with PKI tools and projects is a hands-on way to deepen your expertise. Using free or open-source tools like OpenSSL, Keytool, and GnuPG allows you to practice creating and managing PKI components, perform key and certificate operations, and set up secure connections. Online tutorials and guides can help you navigate these tools effectively. Implementing PKI in real-world scenarios, such as securing websites or emails, provides practical experience and reinforces your learning.

This is the least flashy of the options here, but quite possible it's the easiest and most accessible on the list. Understanding your PKI policies and procedures makes it so much easier to explain PKI to others while also giving you personally a more comprehensive understanding of how all the "Legos go together" so to speak, and more importantly why they go together a certain way.

NIST provides a very detailed framework. Be sure to review SP 1800-16 (Section 5.1 - Best Practices) shows in-depth information on how to establish policies and procedures for Best Practices with TLS Server Certificate Management.