The Four Axes Where National PQC Requirements Diverge
Approved algorithm lists are the first of four axes on which national post-quantum requirements diverge. The other three are harder to abstract away.
Trust Now, Forge Later: The Signature Half of the Migration
Harvest Now, Decrypt Later sets its clock by data retention. The signature side of the quantum problem sets its clock by deployment lifetime, and…
Quantum Readiness Is Not Only a Vendor Problem
Suppliers will ship post-quantum algorithms. The cryptographic inventory, the risk decisions and the contract terms are work no supplier can do on your behalf.
Mosca’s Theorem: Working Out Your Own Quantum Deadline
Mosca's Theorem is one line of arithmetic, and most organisations get two of its three variables wrong. Here is how to estimate each one…
The Deadlines That Already Bind Your Cryptography
Q-Day is a forecast and forecasts move. The 2028, 2030, 2031 and 2035 milestones published by NCSC, the EU, Canada and NIST are commitments…
Before You Create a Chief Quantum Officer Role
Two organizations appointed Chief Quantum Officers in 2023. The lesson was never the title. Here is how to find the quantum decisions in your…
Building the Funding Case for Post-Quantum Migration
Most post-quantum funding requests open with the threat and arrive at the ask with nothing a finance director can check. Here is what to…
When a Full Cryptographic Inventory Isn’t Possible
Enterprise-wide crypto discovery stalls in predictable places. Here is how to scope an inventory you can finish, and how to make the unexamined remainder…
Scoping a Quantum Readiness Assessment Around Four Decisions
Most guidance describes a quantum readiness assessment from the inventory up. Scoping it from the four decisions it has to unlock keeps it from…
Building a Quantum Workforce Without Hiring Physicists
Most enterprises don't need quantum physicists. They need cryptographers, asset owners and procurement staff who understand what changes. Here is how to size and…