Turning NIST SP 1800-38 Into a Governance Work Plan
NIST's practice guide on post-quantum migration is a lab record, not a mandate. A GRC reading of its three volumes, and the four artifacts…
Governing Quantum Sensors Before the Law Names Them
Quantum sensors produce measurements that most privacy statutes do not name and most sensor inventories do not describe. Here is how to classify them…
Getting Vendors to Answer the Right Questions
Most post-quantum vendor questionnaires ask about intent, and intent questions have one correct answer that every vendor knows. Four question shapes that don't.