PQC Awareness for Firms That Handle Client Confidential Data
Law firms, accounting firms, and professional services organizations handle data with multi-decade confidentiality requirements. Privileged attorney-client communications are a harvest-now-decrypt-later exposure that most firms have not assessed. If privileged communications are harvested today and decrypted in 10–15 years, the privilege is breached. The firm and its clients both face the consequences.
This course covers PQC awareness and migration planning for professional services firms. It also covers the advisory duty. If you advise clients on risk, do you have a duty to advise them on quantum risk?
Course Outline
Module 1 Professional Services Quantum Exposure
Attorney-client privilege and the HNDL threat. Accounting firm data sensitivity. Advisory firm client data protection. Document management system cryptographic dependencies. Email encryption and secure file sharing.
Module 2 Client Advisory Obligations
The professional liability question: if you advise clients on cybersecurity risk, what is your obligation regarding quantum risk? How to advise clients on PQC migration without overstepping technical competence. Building quantum risk awareness into existing advisory frameworks.
Module 3 Firm Migration Planning
Prioritizing migration for a professional services firm. Document management and email encryption migration. Client portal and secure collaboration tools. Managing migration with limited IT resources. Vendor dependency for legal technology platforms.
Prerequisites
None. Sector experience is helpful but not required. For a broader PQC foundation, consider starting with Post-Quantum Foundation.
Certificate of Completion
Upon completion, you receive a Quantum Academy certificate of completion. It is separate from our professional certifications and states your CPE credits, one for each 60 minutes of teaching. CISSP, CISM and CRISC holders can claim them with their certifying body. The credits also count toward renewing a Quantum Academy certification. Our CPE credits page explains how to claim them.
Who this course is for
Firm CIOs and information security leads, general counsel and risk partners, knowledge management and document systems owners, and practice leaders whose clients will start asking. Law firms, accounting firms, and advisory practices.
This is an awareness course. If you run the firm’s infrastructure yourself, follow it with the technical courses.
What you’ll be able to do afterward
- Assess privilege and client-confidentiality exposure across document systems, mail, and deal rooms
- Migrate the systems that store the longest-lived material first
- Evaluate the cryptographic posture of the platforms the firm depends on
- Decide what the firm tells clients about this subject, and when
- Judge whether advising clients on quantum risk creates an obligation to have addressed it internally
What you leave with
When you finish, we email you the course handbook, a PDF of every slide with notes that explain it in full. We also include a PDF copy of Quantum Ready. The handbook is yours to keep.
Enrollment includes 180 days of access to the online on-demand course. Where that course is not yet published, the 180 days start on the day it is.
Where this course fits
Nothing is required. Post-Quantum Foundation covers the algorithm vocabulary if you want it first. The Quantum-Safe Legal and Professional Services Intensive is the full-day private workshop on both the migration and the advisory duty.
Why we teach this
The course is built on the Applied Quantum PQC Migration Framework. Its author, Marin Ivezic, is one of the practitioners who teach here. The framework is published openly under Creative Commons at pqcframework.org. The people who teach this course run migration programs inside organizations today. The course covers the problems they meet in that work.
About this program
Quantum Academy credentials are private professional credentials issued by Quantum Academy, a trade name of Post-Quantum Institute. They are not government-issued licenses, accredited degrees, or academic credit, and earning one does not guarantee employment, promotion, regulatory approval, or any other specific outcome.
Quantum Academy programs are educational and informational only, and are not legal, compliance, or engineering advice.