NIST IR 8547 Quantum-vulnerable public-key algorithms are deprecated from 2030 and disallowed by 2035. Assess your exposure

Solution 01

PQC Readiness Assessment

Establish where quantum-vulnerable cryptography lives in your organisation, which assets are most at risk, and what to fix first, backed by evidence rather than estimates.

Overview

A complete inventory of your cryptography and a quantified view of your quantum risk, delivered as a CBOM and a board-ready report.

A readiness assessment is the first step of every successful post-quantum programme. Our engineers deploy QScan across your networks, applications, PKI and devices. They combine automated discovery with interviews about data sensitivity and system lifecycles.

The result is a Cryptographic Bill of Materials (CBOM), a quantum risk score for each asset and business service, and a prioritised roadmap mapped to NIST IR 8547, CNSA 2.0 and your regulatory obligations.

Deliverables

What you receive

01

Cryptographic Bill of Materials

Machine-readable CycloneDX inventory of algorithms, keys, certificates and libraries.

02

Quantum risk register

Per-asset scoring using Mosca's inequality, data shelf-life and exposure.

03

Executive report

Board-level summary of exposure, business impact and investment priorities.

04

Migration roadmap

Phased, risk-ordered plan with effort estimates and quick wins.

05

Compliance gap analysis

Mapping against NIST IR 8547, CNSA 2.0, PCI DSS 12.3.3 and ISO 27001 A 8.24.

Engagement model

How it works

  1. 1

    Scope

    Agree systems, data classes and success criteria with stakeholders.

  2. 2

    Discover

    Run QScan across networks, code, binaries and key stores.

  3. 3

    Analyse

    Score risk, validate findings and model data shelf-life.

  4. 4

    Report

    Deliver the CBOM, risk register and prioritised roadmap.

Ready to make your organisation quantum-safe?

Book a technical briefing or a QScan readiness assessment with our engineers.