PQC Migration for Electric, Gas, and Water Utilities
Utilities combine the OT/critical infrastructure challenges, long-lived devices, safety-case constraints, annual patching windows, with sector-specific regulatory overlays (NERC CIP) and smart grid infrastructure dependencies that add cryptographic complexity beyond traditional SCADA systems.
This course covers PQC migration for electric, gas, and water utilities, addressing the intersection of OT constraints, regulatory requirements, and the emerging smart grid cryptographic estate.
Course Outline
Module 1. The Utility Cryptographic Estate
SCADA and DCS cryptographic dependencies. Smart grid infrastructure: advanced metering, distribution automation, demand response. Substation automation protocols. Generation facility control systems. Water treatment SCADA specifics.
Module 2. NERC CIP and Regulatory Compliance
NERC CIP requirements applied to PQC migration. Change management and configuration management implications. Compliance evidence requirements during cryptographic transition. State-level regulatory considerations for water utilities.
Module 3. Smart Grid Migration
Advanced metering infrastructure (AMI) cryptographic migration. Distribution automation and the IEC 61850 protocol suite. Demand response system security. Distributed energy resource (DER) management and cryptographic dependencies.
Module 4. Asset Lifecycle Integration
Integrating PQC migration with asset replacement cycles. Managing 20–30 year asset lifetimes. Gateway-based protection for legacy infrastructure. Budget planning within utility rate-case cycles.
Prerequisites
None. Sector experience is helpful but not required. For a broader PQC foundation, consider starting with Post-Quantum Foundation.
Certificate of Completion
Upon completion, you will receive a Quantum Academy certificate of completion. This is not a professional certification.
Who this course is for
Utility security architects, OT and control systems engineering leads, NERC CIP compliance staff, and smart grid and metering owners. Electric, gas, and water all fit. The constraint shapes are the same even where the regulators differ.
If you run industrial systems outside the regulated utility sector, Quantum-Safe OT and Critical Infrastructure is the closer match.
What you’ll be able to do afterward
- Map the cryptographic estate across generation, transmission, distribution, and metering
- Separate assets that migrate inside a maintenance window from assets that need an outage
- Work NERC CIP obligations into the plan as a change-control constraint
- Size the smart meter population honestly, including the part that will never be upgraded
- Write post-quantum requirements into procurement for assets specified now
What you leave with
You leave with the course handbook, a PDF of the full material with the instructor notes written out in place of the slides’ bullet points, and a PDF copy of Quantum Ready, included at no extra cost. The handbook is yours to keep. For most organizations, that shared reference is the clearest return on a training budget.
Enrollment includes 180 days of access to the online on-demand course. Where that course is not yet published, the 180 days start on the day it is.
Where this course fits
Nothing is required. Post-Quantum Foundation covers the algorithm vocabulary if you want it first. The Quantum-Safe Energy and Utilities Intensive is the working session. Quantum-Safe OT and Critical Infrastructure gives the broader OT treatment.
Why we teach this
The course is built on the Applied Quantum PQC Migration Framework, published openly under Creative Commons at pqcframework.org and written by the practitioners who teach here. The people who teach this course are running migration programs inside organizations now, and the course covers what those programs hit.
About this program
Quantum Academy credentials are private professional credentials issued by Quantum Academy, a trade name of Post-Quantum Institute. They are not government-issued licenses, accredited degrees, or academic credit, and earning one does not guarantee employment, promotion, regulatory approval, or any other specific outcome.
Quantum Academy programs are educational and informational only, and are not legal, compliance, or engineering advice.