OT migration has fixed constraints. Safety cases must be revalidated before anything changes, and patching windows are annual. Some devices are older than the engineers who maintain them, and a substantial share of the equipment will never run post-quantum cryptography.
Who this intensive is for
OT security architects, control systems and automation engineering leads, safety engineering, plant and site operations, and the security leadership responsible for the boundary between IT and OT. We deliver it live online, in person at scheduled locations, and as private team training. During the day, you work from your own asset register.
We recommend that safety engineers attend from the start. If they first see the plan at the end, they are likely to reject it.
What you’ll be able to do afterward
- Map cryptographic dependencies across the Purdue levels and mark where they cross the IT and OT boundary
- Triage each asset as migrate, gateway, isolate, or retire
- Plan around ICS and SCADA protocols with no post-quantum version, current or planned
- Schedule migration steps inside existing safety-case revalidations, to avoid triggering new ones
- Apply the NIS2 and sector compliance overlay as a planning input
- Defend a mitigation decision for an un-upgradeable asset to an auditor or a regulator
What you leave with
Every participant receives the course handbook, a PDF of the full material with the instructor notes written out. Each participant also receives a PDF copy of Quantum Ready. During the day, you produce an OT cryptographic dependency map across the Purdue levels and an asset triage with a defensible rationale for each mitigation decision. You also produce a migration sequence mapped to safety-case revalidation and patching windows, and a compliance narrative for the devices that cannot be upgraded. All are editable and yours to keep.
The day
Morning, first block. The estate and the boundary. Cryptographic dependencies by Purdue level. Finding where IT and OT actually connect, and checking it against the network diagram.
Morning, second block. Constraints. Safety cases, patching windows, device lifetimes, and vendor support horizons. What each rules out.
Afternoon, first block. What cannot migrate. Triage and mitigation. Gateways, segmentation, compensating controls, and retirement, each with its justification.
Afternoon, second block. The plan. Sequence against safety and maintenance calendars. Draft the compliance narrative.
Where this course fits
We recommend Quantum-Safe OT and Critical Infrastructure as preparation, though you can enroll without it. It covers the same ground at overview depth. Participants who have taken it already know the terms we use during the day. Afterward, Quantum-Safe Energy and Utilities covers the regulated utility requirements. PQC Vendor Governance covers the supplier and integrator conversations.
Why we teach this
This intensive is built on the OT/CNI Extension of the Applied Quantum PQC Migration Framework, published openly under Creative Commons at pqcframework.org. The instructors run migration programs in this sector and teach the constraints they meet in that work.
Certificate of Completion
Upon completion, you receive a Quantum Academy certificate of completion. It confirms that you completed the course and is separate from Quantum Academy’s professional certifications.
Enrollment includes 180 days of access to the corresponding online on-demand course. Where that course is not yet published, the 180 days start on the day it is.
About this program
Quantum Academy credentials are private professional credentials issued by Quantum Academy, a trade name of Post-Quantum Institute. They are not government-issued licenses, accredited degrees, or academic credit, and earning one does not guarantee employment, promotion, regulatory approval, or any other specific outcome.
Quantum Academy programs are educational and informational only, and are not legal, compliance, or engineering advice.
