Repository navigation
Second major release of the PKI Maturity Model.
The model defines 5 maturity levels evaluated across 4 modules (Governance, Management, Operations, Resources) covering 16 categories and 77 requirements.
Changes since 1.0.0
- New Cryptography category in Governance: terminology and scope, algorithms and parameters, protocols and versions, visibility into cryptographic usage, lifecycle and deprecation, and agility.
- Policies and documentation: new requirement "Certificate validation requirements are documented, implemented, and verified".
- Key management and Certificate management: cipher-suite requirements removed, now covered by the Cryptography category. The certificate inventory now also covers approved trust anchors.
- Maturity level 2 renamed from "Basic" to "Foundational".
- Stable identifiers for categories and requirements, for example
G.strategy-and-vision.sponsor-support. - Shared references catalog, versioned independently (catalog version 1.0.0).
- Extension framework and JSON Schema. Published extensions are maintained in pkimm-extensions.
- Eramba converter moved to pkimm-integrations. Excel assessment tools retired in favour of the web self-assessment.
Full release notes, including notes for assessors: pkic.org · source
Artifacts
- Model data:
pkimm-model-2.0.0.yaml - Model JSON Schema:
pkimm-model.schema-2.0.0.json - References catalog (version 1.0.0):
pkimm-references.yaml - References catalog JSON Schema:
pkimm-references.schema-1.0.0.json - Extension JSON Schema:
extension.schema-1.0.0.json - SHA-256 checksums:
SHA256SUMS