Risk Management Planning of Certification Authority Termination Based on ISO 31000:2018

Certification Authorities (CAs) are vital for ensuring the security of personal data and electronic transactions within Public Key Infrastructure (PKI). However, CA termination, whether due to compromised keys, financial troubles, or government policy changes, poses significant challenges, particularly in critical sectors like government, banking, healthcare, and education. This paper highlights the need for comprehensive risk management strategies to address CA termination, where existing guidelines are scarce. We propose a risk management framework based on ISO 31000:2018, focusing on the non-technical risk factors that go beyond technical considerations. ISO 31000:2018 offers a versatile approach applicable to various organizational levels and information systems. This research provides recommendations managing risks surrounding CA termination to minimize losses on the customer side.