How to Perform a Cryptographic Inventory: A Discovery Method Field Guide
Nine discovery methods, what each one actually finds, where each one goes blind, and how to layer them so one tool's gap is another…
The Skills a Quantum-Ready Security Team Needs
Post-quantum migration stalls on staffing more often than on cryptography. Seven capability areas, who in your organization already covers them, and how to find…
Quantum Computing in Energy and Utilities: A Field Guide for Executives
Quantum belongs on two budget lines in an energy company, not one. A field guide to separating the research bet from the engineering deadline,…
Counting the Trust Anchors in a Single Cross-Border Payment
One cross-border payment, sorted five ways. Why hop diagrams make bad inventory schemas, and what a cryptographic bill of materials should be organised around…
Harvest Now, Decrypt Later: Which Data Is Actually at Risk
HNDL is not a threat you defend against everywhere at once. It has a scope, and the scope is narrower than most briefings suggest.…
SBOM, CBOM, and the Rest of the Alphabet
Four bills of materials, four different questions. What each one answers, what belongs in a CBOM, and how to scope the work without stalling…
Crypto-Agility in Practice: A Design Guide for Architects
Crypto-agility is measured in how long a substitution takes and how much of the system it touches. Here is what that means at the…
Five Ways Post-Quantum Migration Programs Fail
Most post-quantum migration programs stall at the seams: certificate profiles, network paths, HSM limits, inventory gaps, and work nobody owns. Five failure modes, and…
Cryptographic Inventory: What Works, What Fails, and Why
A practical guide to running a cryptographic inventory that survives contact with a real environment: what interviews are good for, what tooling catches, and…
The Cryptography Inside a 5G Roaming Call
One roaming voice call crosses four trust domains and invokes symmetric, asymmetric and hash-based cryptography at every one. Here is the walkthrough, and what…