Five streams — one authoritative PQC transition plan.

Each stream produces a discrete, board-ready artefact. Together they compose an execution-ready transition plan your engineers can act on and your regulator can verify.

01 / CRYPTOGRAPHIC DISCOVERY
"You cannot protect what you cannot see."

Most organisations vastly underestimate their cryptographic surface area. We conduct a systematic, tool-assisted discovery across your on-premise, cloud, and hybrid estate — identifying every certificate, key exchange protocol, library dependency, and cryptographic call in your applications and infrastructure.

Primary deliverable
Cryptographic Inventory Framework
Structured templates, taxonomy, and tooling guide
Discuss this stream
Key outcomes
Complete estate-wide cryptographic map
Certificate and key lifecycle catalogue
Dependency graph across vendors and SaaS
Prioritised risk surface by system criticality

Eight weeks from kickoff to signed-off plan.

08
W1
Kickoff & scope alignment
Stakeholder mapping, access provisioning, tooling setup
W2–5
Discovery & inventory
Tool-assisted estate scan, dependency analysis, interview programme
W6
Risk assessment
Data classification, impact scoring, governance design
W7
Roadmap drafting
ASD-aligned sequencing, effort estimation, vendor guidance
W8
Final sign-off
Artefact delivery, board briefing, PMO handover

What you receive.

01
PQC Transition Planning Guide
PDF · ~40 pages · board-ready
02
Cryptographic Inventory Framework
Templates, taxonomy & tooling guide
03
Risk & Impact Register
Scored register · PSPF-aligned
04
Data Classification Guide
Aligned to PSPF sensitivity tiers
05
Governance & Ownership Model
RACI, charter & policy templates
06
Executive Briefing Pack
Board-ready slides & narrative
07
Crypto-Agility Architecture Guide
Principles & reference patterns
"
QSA gave us a plan our board could approve, our engineers could execute, and our regulator could verify — inside one quarter.
Industry Members
ASD-alignedPSPF-compatibleISM-awareFIPS 203/204/205 ready