What Actually Binds You in the US Post-Quantum Rulebook
Statutes, executive orders, OMB memoranda, federal standards, acquisition rules and standard of care all bind differently. A field guide to sorting them, with three…
Archive
Statutes, executive orders, OMB memoranda, federal standards, acquisition rules and standard of care all bind differently. A field guide to sorting them, with three…
Complete cryptographic inventory is a mirage. A Minimum Viable CBOM maps trust boundaries first, records what you don't know, and produces migration decisions instead…
Suppliers will ship post-quantum algorithms. The cryptographic inventory, the risk decisions and the contract terms are work no supplier can do on your behalf.
Most post-quantum funding requests open with the threat and arrive at the ask with nothing a finance director can check. Here is what to…
Enterprise-wide crypto discovery stalls in predictable places. Here is how to scope an inventory you can finish, and how to make the unexamined remainder…
Post-quantum deadlines carry something ordinary hygiene work never has: an external date and an auditable artifact. That makes them among the most fundable lines…
Most guidance describes a quantum readiness assessment from the inventory up. Scoping it from the four decisions it has to unlock keeps it from…
Three quantum clocks run at different speeds in healthcare. Only one has a deadline attached. A field guide to sorting the budget item from…
Quantum work in finance splits into two programs with different evidence, different owners and different urgency. A field guide to funding both correctly.
A CBOM is a machine-readable list of the cryptography inside a system. Here is what it records, the questions it answers, and the four…