Insights shared by DigiCert (Australia & Asia-Pacific)
At CSB, we regularly review industry research and expert commentary to help organisations prepare for emerging cybersecurity risks. We recently came across an insightful article published by DigiCert, a global digital trust provider, which outlines eight key security priorities expected to shape organisational risk strategies in 2026.
We found this article particularly relevant for Australian and Asia-Pacific organisations, as it highlights how AI, automation, resilience, and quantum-safe cryptography are moving from future concepts to immediate priorities. Below is a simplified summary of the key points, written to be easy to follow for both business leaders and IT professionals.
Key Cybersecurity Trends Shaping 2026
1. AI Integrity Becomes a Major Trust Issue
- Trust is shifting from protecting data to proving authenticity
- Organisations will need to show:
Where AI models came from.How data was used.Who (or what) made decisions. - Where AI models came from.
- How data was used.
- Who (or what) made decisions.
- DigiCert expects:
-AI agents to have verifiable digital identities
-Cryptographic tracking of AI models and training data. - AI agents to have verifiable digital identities.
- Cryptographic tracking of AI models and training data.
- Internal research shows 97% of Asia-Pacific enterprise IT leaders have already implemented or plan to implement AI agents within two years.
“Security in 2026 won’t just be about protecting systems, it will be about proving integrity across every digital interaction.”
— Jason Sabin, Chief Technology Officer, DigiCert.
2. Automation Is No Longer Optional
- Certificate lifespans are shrinking rapidly:
Moving toward 200 days, with a long-term target of 47 days. - Moving toward 200 days, with a long-term target of 47 days.
- Manual certificate management (spreadsheets, reminders) will no longer work.
- Organisations will need:
Fully automated certificate lifecycle management.Self-healing systems to prevent outages. - Fully automated certificate lifecycle management.
- Self-healing systems to prevent outages.
“Shorter certificate lifespans will make manual processes untenable.”
— Daniel Sutherland, Regional Vice President, DigiCert Australia & New Zealand.
3. Quantum Computing Is Becoming a Real Planning Priority
- Quantum computing is no longer a distant concern.
- Governments and regulators are already issuing guidance:
Australian Signals Directorate recommends businesses have a plan for post-quantum cryptography (PQC) by end of 2026.Singapore and India are investing heavily in quantum-safe initiatives. - Australian Signals Directorate recommends businesses have a plan for post-quantum cryptography (PQC) by end of 2026.
- Singapore and India are investing heavily in quantum-safe initiatives.
- Organisations will need:
PQC migration plans.Testing for compatibility and interoperability issues. - PQC migration plans.
- Testing for compatibility and interoperability issues.
4. Resilience Moves to the Boardroom
- Cyber resilience is becoming a board-level responsibility.
- New regulations are increasing expectations, including:
-Australia’s CPS 230.-EU’s Digital Operational Resilience Act.-Singapore’s Technology Risk Management Guidelines. - Australia’s CPS 230.
- EU’s Digital Operational Resilience Act.
- Singapore’s Technology Risk Management Guidelines.
- Organisations will be assessed on their ability to:
-Maintain identity, DNS, and certificate services during disruption
-Recover quickly from outages or cyber incidents - Maintain identity, DNS, and certificate services during disruption
- Recover quickly from outages or cyber incidents
5. Content Authenticity and Email Trust Are Under Pressure
- Deepfakes and AI-generated content are driving new controls.
- DigiCert expects:
-Enforcement of C2PA standards for AI-generated or edited content
-Use of watermarking and cryptographic proof of origin. - Enforcement of C2PA standards for AI-generated or edited content.
- Use of watermarking and cryptographic proof of origin.
- Email security will increasingly rely on:
-Verified Mark Certificates.-Strict DMARC enforcement. - Verified Mark Certificates.
- Strict DMARC enforcement.
- Verified sender identity is expected to become a baseline requirement.
6. Machine Identities Will Outnumber Human Identities
- DigiCert forecasts:
Machine identities (devices, applications, AI agents) will outnumber human identities by 100 to 1. - Machine identities (devices, applications, AI agents) will outnumber human identities by 100 to 1.
- This will force changes in:
-Identity architecture.-Monitoring and lifecycle management. - Identity architecture.
- Monitoring and lifecycle management.
- Many environments will require quantum-safe identity frameworks by default.
7. Australia and Asia-Pacific Are Moving Early
- DigiCert sees Australia as an early adopter due to:
-Regulatory momentum.-Operational resilience requirements.-Government guidance on quantum planning. - Regulatory momentum.
- Operational resilience requirements.
- Government guidance on quantum planning.
- Across Asia-Pacific:
-Singapore is advancing quantum-safe planning and AI governance.-India is expanding focus on digital sovereignty, talent, and governance’. - Singapore is advancing quantum-safe planning and AI governance.
- India is expanding focus on digital sovereignty, talent, and governance.
- The region is moving from strategy to execution.
We believe that trust, identity, and resilience are becoming foundational to modern cybersecurity — not optional extras.
Organisations that start automating trust infrastructure, planning for post-quantum cryptography, and embedding AI integrity today will be better positioned to meet regulatory expectations, protect operations, and build long-term digital trust.
If you are interested to learn more in details for this article, feel free to check out https://securitybrief.com.au/story/digicert-maps-2026-ai-trust-quantum-security-agenda
For more published articles from CSB, please visit: www.cybersafebusiness.au