How quantum computers work, without the physics degree. Qubits, gates, and algorithms at a conceptual and practical level. Five major hardware modalities and their tradeoffs. Quantum error correction. Cloud platforms. How to evaluate claims critically. Technology professionals, enterprise architects, security professionals, data scientists, software developers, and technical leaders who need a working understanding of quantum computing for professional evaluation, planning, or strategy purposes.
An eight-hour workshop for pharma and biotech teams. Work validation, record retention, and trading-partner constraints into a migration plan ready for quality review. IT quality and computerized system validation leads, manufacturing and laboratory systems owners, serialization and supply chain leads, regulatory operations, and CISOs and security architects who will own the plan. Send a mixed group from one company. The person who owns the validation master plan rarely owns the TLS configuration or the trading-partner credentials. Bring at least one person from quality assurance. Many of the sequencing decisions in this workshop are change control decisions. If you run a health system or build medical devices, the Quantum-Safe Healthcare Intensive is the working day for your estate.
A two-hour briefing for board members on quantum risk, fiduciary exposure, and the questions to put to management. Non-executive directors, board members, audit committee members, risk committee members, and corporate secretaries preparing board materials on technology risk.
Two hours on building the internal business case for PQC migration: framing, budget logic, and the arguments a CFO will accept. CISOs, security program managers, and anyone responsible for securing PQC migration funding. Also useful for CFOs, finance leaders, and budget committee members who want to understand what they are being asked to fund.
From plan to production. Wave planning, entry and exit criteria, pilot evidence dossiers, rollback testing, negative testing, production deployment, and the closure checklist and handover to operations. Migration program leads, technical delivery managers, and the architects and engineers doing the work in the waves. Best taken by a team that is past planning and into execution. If funding is still unsettled, PQC Migration: Building the Business Case comes first.
An eight-hour workshop for cloud and SaaS providers. Plan your own migration and the customer-facing capability your customers will demand. Platform security architects, KMS and cryptography service owners, TLS and edge infrastructure leads, compliance staff who own FedRAMP or equivalent obligations, and the product managers who will have to explain post-quantum capability to customers. Bring product management. The customer-facing half of this workshop produces roadmap commitments, not just engineering ones.
Lead PQC migration programs with confidence. Covers migration governance, regulatory compliance, organizational readiness, risk communication, vendor management, and program execution. Prerequisite: PQCS certification. CISOs, security managers, program managers, project managers, compliance managers, risk managers, and senior technical leaders who are responsible – or will be responsible – for overseeing PQC migration within their organizations. It is also appropriate for consultants and advisors who guide clients through PQC transitions.
An eight-hour workshop for exchanges, custodians, and protocol teams. Work wallet, key, and governance exposure into a migration plan you can act on. Exchange and custodian security leads, key management and HSM engineers, protocol and wallet engineering teams, and the risk and compliance staff responsible for custody obligations. Protocol teams and custodians work well in the same room, because each one's timeline is the other's constraint.
Governance, risk, and compliance for PQC migration. Mapping requirements to ISO 27001, SOC 2, PCI DSS, HIPAA, CMMC, FedRAMP, DORA, and NIS2. Risk assessment, evidence frameworks, and vendor readiness evaluation. Governance, risk, and compliance professionals, internal audit, and second-line risk functions who have to assure a migration they will not run. Also the migration leads who have to satisfy them. If you are doing the technical work rather than assuring it, PQCS Specialist Training is the better route.
Detection, monitoring, and incident response for PQC migration. Dual-algorithm visibility. Downgrade attack detection. SIEM rule design. Incident playbooks. The SOC role during and after the migration. SOC analysts and leads, detection engineering, and incident response teams who will have to monitor an estate through a cryptographic transition. Some of what changes is visibility, and some of it is the detection logic itself. If your interest is planning the migration rather than operating through it, the migration courses will fit better.
An eight-hour workshop for insurers and reinsurers. Plan your own migration and build a defensible position on underwriting quantum risk. Insurance CISOs and security architects, cyber underwriting leads, actuarial and risk staff working on cyber exposure, and the claims and policy wording specialists who will have to live with whatever position gets adopted. The day only works with both sides present. Security teams and underwriters rarely plan together, and this is a subject where they have to.
Verify PQC implementations rigorously. Covers test strategy design, hybrid implementation verification, interoperability testing, conformance testing, and audit evidence production. Prerequisite: PQCS certification. Security testers, penetration testers, QA engineers, compliance auditors, security consultants, and technical assessors who will be responsible for verifying PQC implementations. This course is also appropriate for security architects and engineers who need to define validation criteria and acceptance tests for PQC migration programs.
An eight-hour workshop for operators of industrial and critical systems. Plan migration around safety cases, patching windows, and device lifetimes. OT security architects, control systems and automation engineering leads, safety engineering, plant and site operations, and the security leadership responsible for the boundary between IT and OT. Delivered live online, in person at scheduled locations, and as private team training. The day works from your own asset register. Safety engineering belongs in the room from the start. Bring them in at the end and they will reject the plan at the end.
The half-day entry point to post-quantum cryptography: what changes, why it matters now, and the vocabulary every later course assumes. Security professionals, IT managers, compliance officers, risk analysts, software developers, enterprise architects, and business leaders who need a grounded introduction to post-quantum cryptography. No prior quantum computing or advanced cryptography knowledge is required.
The half-day entry point to post-quantum cryptography: what changes, why it matters now, and the vocabulary every later course assumes. Security professionals, IT managers, compliance officers, risk analysts, software developers, enterprise architects, and business leaders who need a grounded introduction to post-quantum cryptography. No prior quantum computing or advanced cryptography knowledge is required.
The quantum technology supply chain from rare helium-3 to dilution refrigerators to control electronics. National strategies, export controls, investment flows, and the geopolitical forces shaping who builds and who buys. Technology strategists, policy analysts, corporate development professionals, government officials, and senior leaders evaluating organizational quantum technology positioning under geopolitical constraint.
A clear-eyed executive briefing on quantum AI: what is demonstrated, what is speculative, and how to make investment and talent decisions you can defend. Board members, C-suite executives, investors, analysts, and strategy leaders who face quantum AI claims in investment decisions, vendor proposals, or competitive analysis
The vendor dependency problem in PQC migration. Assessing vendor PQC readiness. Contractual language for migration obligations. Criticality tiering. Bridge patterns for slipping vendor timelines. The 62% problem. Third-party risk managers, procurement and vendor management, security architects who set supplier requirements, and the GRC staff who verify them. Suppliers themselves get a clear view of what they will be asked. If your concern is your own estate rather than your suppliers', the discovery and migration courses come first.
