Cryptographic Bill of Materials
Machine-readable CycloneDX inventory of algorithms, keys, certificates and libraries.
Solution 01
Establish where quantum-vulnerable cryptography lives in your organisation, which assets are most at risk, and what to fix first, backed by evidence rather than estimates.
Overview
A readiness assessment is the first step of every successful post-quantum programme. Our engineers deploy QScan across your networks, applications, PKI and devices. They combine automated discovery with interviews about data sensitivity and system lifecycles.
The result is a Cryptographic Bill of Materials (CBOM), a quantum risk score for each asset and business service, and a prioritised roadmap mapped to NIST IR 8547, CNSA 2.0 and your regulatory obligations.
Products used
Deliverables
Machine-readable CycloneDX inventory of algorithms, keys, certificates and libraries.
Per-asset scoring using Mosca's inequality, data shelf-life and exposure.
Board-level summary of exposure, business impact and investment priorities.
Phased, risk-ordered plan with effort estimates and quick wins.
Mapping against NIST IR 8547, CNSA 2.0, PCI DSS 12.3.3 and ISO 27001 A 8.24.
Engagement model
Agree systems, data classes and success criteria with stakeholders.
Run QScan across networks, code, binaries and key stores.
Score risk, validate findings and model data shelf-life.
Deliver the CBOM, risk register and prioritised roadmap.
Book a technical briefing or a QScan readiness assessment with our engineers.