Navegando las tendencias globales: una comparación de la dinámica de PKI en EE. UU., la UE y APAC

Public Key Infrastructure (PKI) is a cornerstone for secure digital communication in the rapidly evolving cybersecurity landscape. Over the past few months, I’ve had the opportunity to spend time in three major regions— the United States, the European Union, and Asia-Pacific (APAC) — and delve into the nuances that define and differentiate the trends steering PKI in these areas.

There are many similarities from region to region, but there are also myriad differences in how organizations around the world approach PKI and other industry trends. Below, I share my observations on what the US, EU, and APAC have in common regarding PKI— and where these regions differ. And, since 2023 is coming to a close, I’ll also offer a few predictions for the evolution of PKI going into the new year. 

Cuatro tendencias universales en ciberseguridad

1. Aumento del riesgo y de la demanda de ciberseguridad

En las tres regiones que visité, observé un hilo común entretejido en el tejido de las tendencias de PKI: una escalada del riesgo, un aumento de la demanda de medidas de ciberseguridad y una mayor dependencia de PKI.

2. El déficit de cualificaciones determina el modo de implantación de la PKI

Organizations worldwide are still grappling with a cybersecurity labor shortage, so unsurprisingly, the need for more skilled personnel is a common challenge for US, EU, and APAC businesses. To combat the lack of resources, organizations choose PKI deployment and operational modes that are easier to manage and require less specialized expertise. This includes packaged solutions both on-premise and in the cloud.

3. El auge de los contenedores y la automatización

El auge de la contenedorización es un fenómeno observado en todo el mundo, que está transformando las operaciones in situ. Organizaciones de todo el mundo están experimentando un cambio hacia la contenedorización, agilizando el despliegue y mejorando la eficiencia operativa. La automatización, que está estrechamente relacionada con la contenedorización, ayuda a hacer frente a la escasez de personal cualificado durante la actual escasez de mano de obra, y un número cada vez mayor de organizaciones están invirtiendo en formas de racionalizar los procesos y las operaciones para hacer frente a la evolución del panorama.

4. La confianza cero es una palabra de moda

Zero trust, a buzzword echoing in the corridors of cybersecurity, is a shared focal point for organizations globally. Though interpretations may vary, the integration of mutual TLS (mTLS) stands out as a primary manifestation of the zero-trust principle. This especially is in focus for newer applications, while legacy applications get isolated or put on the watch list for decommissioning. Interest in API-driven solutions transcends regional boundaries, with users and use cases determining adoption rather than regional affiliations.

Distinciones regionales: adopción de la nube, soberanía, preparación cuántica e impulsores de la industria

Ahora que ya hemos visto las similitudes de varias regiones, veamos en qué se diferencian unas de otras.

1. La adopción de la nube se afianza en EE.UU.

Estados Unidos muestra un cambio predominante hacia la adopción de la nube, una tendencia que es ligeramente menos pronunciada en la Unión Europea, donde a menudo conlleva un trasfondo de preocupación. Por el contrario, los países de Asia-Pacífico, especialmente los insulares, adoptan la nube con cautela, por motivos de soberanía y por el deseo de mantener las operaciones en caso de catástrofe que pudiera aislar lugares remotos.

2. Las iniciativas de preparación cuántica son un compás de espera regional

Post-quantum readiness continues to be a hot topic that transcends geographical boundaries. However, the urgency and initiation of efforts seem to differ between regions, with APAC adopting a more cautious stance, waiting for industry momentum, while the US and EU (especially in the finance sector) are already pioneering pilots and proof of concepts. Something else that sets the US apart is its government’s push for quantum readiness.

3. El sector público frente al privado impulsa la adopción de PKI

In the US and EU, the private sector spearheads PKI adoption, with government entities following suit in the modernization journey – adopting commercial off-the-shelf (COTS) solutions as much as possible. In large parts of APAC, however, government initiatives play a dominant role in steering PKI adoption, with the industry following suit. It will be interesting to see how long it takes for industry to drive the evolution of this technology vs government entities.

De cara al futuro: 2024 y más allá

As we navigate the evolution of PKI, the convergence of global trends and regional distinctions unveils a dynamic landscape. While challenges persist, the prospect of 2024 witnessing further growth in cybersecurity and PKI is clear. The PKI journey, shaped by universal challenges and regional nuances, is a testament to the evolving nature of cybersecurity in an interconnected world. The deployment of quantum-ready PKIs stands as a beacon, and I believe that next year, we could witness the deployment of the first industry-wide quantum-ready PKIs in production. 

Yo, por mi parte, estoy deseando ver lo que nos espera el año que viene y observar si mis predicciones se cumplen.