Roadmap
Post-Quantum Cryptography Readiness Roadmap
This roadmap defines the organization's strategy and phased plan for transitioning cryptographic systems to post-quantum cryptography (PQC) algorithms. It responds to the threat posed by cryptographically relevant quantum computers (CRQCs) to current public-key cryptographic algorithms, and establishes a time-bound migration plan aligned with NIST PQC standards, NIST SP 800-208, and NSA CNSA 2.0 Suite guidance.
- Type
- Roadmap
- Version
- 1.1.11
- Date
- 2026-09-25
- Owner
- Chief Information Security Officer
- Approving authority
- Chief Information Officer
- Classification
- Public
- Confidentiality
- Public
- Category
- Information Security
- Review frequency
- Annual and upon significant NIST, ETSI, or national standards developments
- Licence
- CC BY-SA 4.0
Read the full text on GitHub (opens in a new tab)
Outline
- Purpose
- The quantum threat
- Target PQC algorithms
- Migration scope
- Phased migration roadmap
- Crypto-agility
- Governance and accountability
- Framework alignment
Frameworks it maps to
- NIST SP 800-208
- NIST FIPS 203
- NIST FIPS 204
- NIST FIPS 205
- NSA CNSA 2.0 Suite
- ETSI TR 103 619
- ISO/IEC 27001:2022
- BASC International Security Standard 6.0.2/6.0.3
Related documents
- Encryption and Key Management Policysecurity
- Cryptographic Key Lifecycle Management Frameworksecurity
- Cryptographic Key Operations Proceduresecurity
- Enterprise Governance and Risk Management Policyrisk
Next
All Documents