IDC - Experts & Thought Leaders

Commvault, a pioneer in unified resilience at enterprise scale, announces new data security and threat hunting capabilities for Microsoft 365. With more than 450 million paid commercial seats worldwide, Microsoft 365 is a popular cloud productivity and collaboration platform. Bad actors often target emails, attachments, and shared files associated with the SaaS application. Historical backup copies Commvault is helping Microsoft 365 customers advance resilience in the following ways: Discover sensitive data: Map where sensitive data, including personally identifiable information (PII) and intellectual property, resides across Microsoft 365 with Commvault Data Posture 360 (previously Risk Analysis) and surface exposure risks to help prioritise response. Hunt for hidden threats: Uncover malware, ransomware, encryption activity, data anomalies, and other indicators of compromise across protected Exchange, OneDrive, SharePoint, and Teams data with Commvault Threat Scan. Know what’s safe to restore: Use threat signals to isolate compromised content and identify clean, trusted recovery points. This helps recover only known-good data, reduce reinfection risk, and accelerate recovery of Microsoft 365 data. Broaden threat discovery: Apply current threat intelligence to historical backup copies in immutable storage to detect threats that may have been unknown or undetected when the data was originally protected. Informed recovery decisions “Commvault is bringing three key elements to the resilience equation with Microsoft 365: detection, visibility, and clean recoveries,” said Pranay Ahlawat, Chief Technology and AI Officer at Commvault. “Resilience and compliance depend on identifying threats fast, understanding if sensitive data is exposed, and what’s safe to restore.” “During a cyber incident, knowing what data can be safely restored is just as important as having a backup,” said Matt Pancheri, IT Manager and Systems Administrator, Spokane Industries. “Commvault gives our team a way to investigate our protected Microsoft 365 data and make more informed recovery decisions, helping limit disruption to the business.” Adopt AI with confidence “Alerting decision-makers to compromised data within Microsoft 365 backup offers both data security and data protection teams the information they need for improved resilience and continuity,” said Jennifer Glenn, Research Director for Information and Data Security, IDC. “This is essential for enterprises to prove operational data is both recoverable and trustworthy.” Threat Scan and Data Posture 360 for Microsoft 365 are both planned for early access preview in the coming weeks, with general availability targeted for early 2027. Both capabilities will be offered as paid add-ons to Commvault Backup & Recovery for Microsoft 365. Customers can purchase either capability independently. Learn more about this announcement at SHIFT 2026, where attendees will explore the new rules of resilience in the age of AI and learn how recovery, visibility, and cyber resilience can help organizations adopt AI with confidence. SHIFT 2026 will be the boldest event in the company’s history, enabling attendees to explore and immerse themselves in the new rules of resilience – and it all starts with AI.

DigiCert, a pioneer in intelligent trust, announces accelerating momentum for DigiCert® Trust Lifecycle Manager (TLM), with annual recurring revenue growing 38% year over year as enterprises increasingly automate certificate management and prepare for shorter certificate lifespans and post-quantum cryptography (PQC). TLM's growth reflects a broader shift in enterprise security. Public TLS certificate maximum validity is on a path to just 47 days in 2029, significantly increasing the certificate management workload. That workload is compounded by the growing number of certificates spread across increasingly complex enterprise environments. Post-quantum transition DigiCert's 2026 Global PKI Research underscores the challenge: only 34% of organizations have a complete, up-to-date inventory of their digital certificates, while 73% are very or extremely concerned about outages caused by expired certificates. “Certificate management has become core infrastructure for the enterprise,” said Deepika Chauhan, Chief Product Officer at DigiCert. “A single missed renewal can trigger a costly outage, and shorter lifespans leave less room for error when managing thousands of certificates. The growth we’re seeing in Trust Lifecycle Manager reflects customers’ urgency to automate renewals, keep critical services running, and build the crypto-agility needed for the post-quantum transition.” Manual certificate management Leading brands around the world are turning to DigiCert Trust Lifecycle Manager to modernise how they manage digital trust, including American Red Cross, Agilent Technologies, Circle K, Hitachi, MediData, MGM Resorts International, Nokia, Schweiserische Mobiliar, and W.L. Gore & Associates. “As certificate lifespans continue to shrink, manual certificate management becomes increasingly challenging at enterprise scale,” said Kenneth Nydegger, Product Owner at Schweizerische Mobiliar, one of Switzerland's pioneer insurers. “DigiCert Trust Lifecycle Manager provides the visibility and automation we need to manage certificates more efficiently and reduce operational risk. At the same time, it helps us prepare for future cryptographic requirements and supports a more agile and sustainable security strategy.” Certificate lifecycle operations “Reliability is fundamental to the digital connections that support Switzerland's healthcare system,” said Michael Stocker, Lead ICT-Infrastructure and ICT-Operations at MediData AG, Switzerland's leading provider of secure healthcare data exchange. “With 24,000 participants exchanging more than 120 million documents through our protected digital data space each year, we need certificate management that can scale without interrupting critical workflows. DigiCert Trust Lifecycle Manager helps us automate those operations and maintain trusted connections across this ecosystem.” Organizations across all industries are using DigiCert TLM to discover certificates and cryptographic assets, centralize visibility, and automate certificate lifecycle operations across increasingly complex environments. Large enterprises with certificate environments exceeding 100,000 certificates are using DigiCert Trust Lifecycle Manager to centralize visibility and automate lifecycle operations. TLM helps reduce manual work, lower outage risk, and keep critical services running as certificate lifespans shrink. As certificate lifespans shorten, that automation becomes increasingly important to keeping services running. Risk of unauthorized enrollment DigiCert continues to expand TLM’s capabilities with new innovations that remove manual work and strengthen security across the certificate lifecycle: Continuous Validation, powered by UltraDNS, automates Domain Control Validation, keeping domains continuously validated and ready for certificate issuance and renewal without recurring manual intervention. Apple Device Attestation verifies hardware-backed device identity before certificates are issued. Combined with DigiCert’s existing Jamf integration, it enables automated certificate enrolment for managed Apple devices while reducing the risk of unauthorized enrollment. Enterprise trust store management extends automation to the roots and intermediate certificates that systems rely on to validate trust. Centralized controls and automated distribution help keep trust stores consistent across enterprise environments, reducing the risk of outages and supporting future cryptographic transitions. Private certificate authorities DigiCert is also expanding the TLM integration ecosystem with technology leaders including BeyondTrust, F5, Fortinet, HashiCorp/IBM, HPE, Imperva, and NetScaler, helping organizations extend certificate automation into the applications, infrastructure, and security platforms where certificates are deployed. DigiCert was named a Leader in the IDC MarketScape: Worldwide Certificate Lifecycle Management 2026 Vendor Assessment. The assessment highlighted TLM's centralized discovery, policy-based governance and end-to-end automation across public and private certificate authorities, along with its ability to help smaller teams automate high-volume certificate environments. Real-world applications “Certificate lifecycle management is a strategic requirement for organizations contending with shorter certificate lifespans, rapidly expanding machine identities, and the transition to post-quantum cryptography,” said Jennifer Glenn, Research Director, IDC. "DigiCert offers capabilities required by enterprises navigating this shift. Trust Lifecycle Manager supports CA-agnostic automation, certificate discovery and governance, and operation across large, hybrid environments. These capabilities address both near-term certificate management needs and the longer-term requirement for enterprise crypto-agility." In September, DigiCert Trust Lifecycle Manager was named a recipient of TMCnet's inaugural 2026 Quantum Computing Product of the Year Award, recognizing products and solutions advancing the quantum computing ecosystem and its real-world applications.

DigiCert, a pioneer in intelligent trust, announces the general availability of DigiCert Quantum Central, part of the DigiCert ONE platform, that helps organizations manage and demonstrate progress toward post-quantum cryptography (PQC) readiness. First introduced in preview in July, Quantum Central offers expanded capabilities that help organizations move from finding cryptographic risks to managing them. Teams can bring together cryptographic data from multiple sources, apply their own security policies, initiate remediation workflows, assign ownership, and track progress from a central location. Trackable readiness program The launch comes as organizations struggle to turn PQC planning into execution. According to the 2026 DigiCert Quantum Readiness Outlook, 87% of organizations are planning, testing or implementing PQC initiatives, yet only 7% have deployed quantum-safe or hybrid cryptography. “Most organizations understand the quantum risk. Their challenge is coordinating action across legacy systems, fragmented data and multiple technology owners,” said Kevin Hilscher, Senior Director of Product Management at DigiCert. “Quantum Central turns cryptographic visibility into a prioritised and trackable readiness program. Teams can begin with a critical environment, act on what they find and expand over time, while giving leadership, auditors and regulators clear evidence of progress.” Cryptographic bills of materials Quantum Central helps security, IT, risk and compliance teams: Create a unified cryptographic inventory: Consolidate and normalise data from DigiCert ONE, network scans, certificate lifecycle management platforms, key vaults, uploaded CSV files and software or cryptographic bills of materials. Establish policies and priorities: Define cryptographic policies based on organizational requirements, industry standards, and regulatory guidance. Quantum Central evaluates inventory data, identifies policy violations and alerts teams when action is needed. Turn findings into remediation: Translate policy violations into recommended actions and create change requests through established workflows, including Jira. Integration with DigiCert Trust Lifecycle Manager enables teams to initiate certificate lifecycle actions directly from their readiness program. Interpret inventory data faster: Use an inventory-aware AI assistant to understand findings, explore cryptographic exposure and identify practical next steps. Measure and report progress: Track remediation status, policy compliance, and overall cryptographic posture through centralized dashboards. Organizations can also export inventory data as cryptographic bills of materials for audits, assessments, and reporting. Connect external systems: Import cryptographic data programmatically through an API, allowing organizations to continue expanding their inventory as their readiness programs mature. Post-quantum readiness “The market is entering the operational phase of post-quantum readiness, and enterprises need a way to connect cryptographic discovery with business context, policy and remediation,” said Jennifer Glenn, Research Director for Information and Data Security at IDC. “Tying inventory, workflows, and reporting to that policy in a single view gives organizations a practical operating model for the complex, multiyear transition to quantum-safe cryptography.” Quantum readiness requires organizations to manage a multiyear technology transition while standards, vendor capabilities and regulatory expectations continue to evolve. Organizations can make practical progress now by assigning accountable owners, establishing enough cryptographic visibility to set priorities, adopting PQC where supported and documenting results. An incremental approach allows teams to begin with a critical application environment or infrastructure layer and expand their program without waiting for a complete enterprise-wide inventory. Complex PKI transition Quantum Central is the management layer for enterprise quantum readiness, spanning cryptographic use cases beyond PKI. DigiCert ONE managers provide the automation layer for certificates, software, devices and content, while DigiCert Private CA and CertCentral provide the trust and issuance foundation needed to put new cryptography into production. That combination helps organizations manage the broader readiness program while preparing for the more complex PKI transition that will unfold over time. DigiCert Quantum Central is available now. Organizations can start a free trial, request a demonstration or contact DigiCert to discuss an enterprise deployment. Resources: Organizations can deploy PQC today to protect their network traffic from harvest now, decrypt later attacks. Read their white paper, Recommendations for Quantum Safe TLS, for more details. Check the quantum readiness of the organizations and others’ websites with their online PQC Checker. Learn the basics about post quantum cryptography and understand the urgency to start quantum readiness now in DigiCert’s PQC for Dummies Guide.