NIST has published its first post-quantum standards and set transition timelines. Readiness starts with knowing where your cryptography is — which most organizations cannot answer today.
Data encrypted today with RSA or elliptic-curve cryptography can be harvested now and decrypted once a capable quantum computer exists. For data that must stay confidential for years, the risk is already present.
Dave led post-quantum and TLS 1.3 readiness work groups at a major U.S. bank and governed 2.5 million certificates across 80,000 servers. This engagement applies that experience: build the inventory, prioritize by data shelf life and exposure, and sequence a crypto-agile migration that fits real system lifecycles.
Scope, governance, and discovery approach; select discovery tools and data sources.
Certificates, protocols, libraries, keys, and HSMs from scans, CMDB, and code.
Rate each system on data shelf life, exposure, and migration difficulty.
Crypto-agility requirements, vendor asks, sequenced migration plan, and executive brief.
For long-lived sensitive data, yes, because of harvest-now, decrypt-later risk. Inventories and vendor commitments also take years, which is why the roadmap starts now.
No. We are tool-neutral and help you use existing scanners, certificate managers, and CMDB data, or select a tool if needed.