Which US Federal Post-Quantum Deadline Binds You
Federal post-quantum policy now sets dates, not intentions. Five June 2026 documents assign different deadlines to different system classes. Here is how to find…
Where Every Country Stands on Post-Quantum Migration
More than a dozen national authorities have published post-quantum deadlines. They agree on 2035 and disagree on almost everything before it. A field guide…
CNSA 2.0 Explained: A Compliance Reading for GRC Teams
CNSA 2.0 is the one post-quantum directive written like a control rather than a goal: named algorithms, fixed parameter levels, dated procurement gates. A…
The Two Dates in NIST IR 8547 That Govern Your Migration Plan
NIST IR 8547 is usually reduced to 2035. It sets two dates, and the earlier one is already shaping procurement and risk acceptance decisions.
NIS2, DORA, and the Evidence a Supervisor Will Ask For
European post-quantum regulation rarely says "deploy PQC by date X." It says produce the file. Here is what that file contains, and what your…
What Actually Binds You in the US Post-Quantum Rulebook
Statutes, executive orders, OMB memoranda, federal standards, acquisition rules and standard of care all bind differently. A field guide to sorting them, with three…
Post-Quantum Cryptography Standards: What Is Final and What Is Not
Three post-quantum standards are final, one is still pending, and roughly fifteen more algorithms are in competition. Here is where the boundary sits and…
Turning NIST SP 1800-38 Into a Governance Work Plan
NIST's practice guide on post-quantum migration is a lab record, not a mandate. A GRC reading of its three volumes, and the four artifacts…