The PQC Readiness Scorecard assesses how ready an organization is for post-quantum cryptography, and shows what a complete migration program contains. It follows the PQC Migration Framework v3.0 and rates seven domains on a scale from 0 to 5: Cryptographic Inventory, Governance & Ownership, Pilots & Deployment, Vendor & Supply Chain, Compliance & Standards, Crypto-Agility, and Risk & Prioritization. The readiness level is the level of the lowest domain. Under each question, “What counts” describes the evidence you need before you answer Yes.
In the results you will see the dated regulatory obligations for the jurisdictions and sectors you select, and a checklist for each domain’s next level. You can export a full report, a one-page board summary, CSV files and a CycloneDX 1.7 attestation. Everything runs in your browser. Nothing you enter is sent to a server.
Our guide explains the scoring and sets seven exercises for course participants: How to Use the PQC Readiness Scorecard.
Note: The scorecard is a learning and self-assessment tool. It records your answers as given and is not an audit.
Loading the PQC Readiness Self-Assessment...