Post-Quantum Readiness Assessment

KNOW WHERE YOUR PATH TO POST-QUANTUM
READINESS BEGINS.

Quantum computers pose an inevitable threat to digital security. Within the decade a quantum computer will be able to break traditional cryptography in use today. With the understanding that the transition to post-quantum cryptography will take several years, and that bad actors are harvesting data now to decrypt later, organizations need to protect their data today. While the timelines are fuzzy, the takeaway is clear: The time to prepare for PQ is now. How prepared are you?

RESULTS

Quantum computers are in development and experts predict that they will be able to crack classical computing cryptography (e.g. the widely used RSA algorithm) within the decade. How is your organization preparing to mitigate this post-quantum (PQ) threat?

Select all that apply:

We have not considered the impact of quantum computers on all the cryptography we use throughout our IT landscape

We are looking at advantages quantum computers will bring to our business, but not the security risks they present to our systems and data

We are aware of the threat, it is on our risk register, but haven't started a PQ preparedness strategy

We are building a post-quantum cryptography migration strategy right now

We have an accurate and up to date inventory of our cryptographic assets so we can start the migration planning and testing phases

We have started to look carefully at how robust and efficient our cryptographic migration procedures are

Other - please specify

I don't know

There is a documented threat of "harvest now, decrypt later" where bad actors are collecting encrypted data from organizations with the intention of decrypting once a general-purpose quantum computer is available. Does your organization have long-life data (sensitive data that needs to live and remain confidential for 10+ years) that you need to protect with quantum-resistant cryptography today?

Select one:

Yes

Unsure

Introducing Post-Quantum Cryptography to sit alongside or replace classical cryptography will impact the majority of IT landscapes. What are your greatest concerns when it comes to the quantum threat?

Select all that apply:

The discovery/inventory of our cryptographic assets (keys, certificates, secrets, algorithms, etc) and the data/ applications they protect, then prioritizing where the greatest risks are

Having a company wide strategy, funding, and/or Board sponsorship for this foundational change in our IT landscape and its operation

Improving our crypto-agility (ability to change the cryptography and algorithms currently in use)

The "harvest now, decrypt later" threat where long-term encrypted data is already at risk

The post-quantum cryptographic algorithms being proposed are brand new and may not prove to be secure after deployment

Testing all our systems, endpoints, networks etc. and managing the transition to post- quantum cryptography in time

Resources and expertise internally to oversee the transition

Having the right scale and technologies to support the extra computing power required by these new quantum-resistant algorithms

One of the first steps for PQ preparedness is to inventory your cryptographic assets/systems and understand the classification of the data it protects. By knowing what is protecting your highest value data, as well as the data lifecycle/flow, you can prioritize your biggest risk areas. Do you feel like you have a catalog and inventory of your data?

Select one:

Yes

Unsure

When it comes to the cryptographic assets (keys, certificates, secrets, libraries, and algorithms) across your IT landscape, do you feel like you have full visibility into that inventory?

Select one:

Yes

Unsure

Crypto-agility is the process of evolving your cryptography (e.g. moving from one algorithm to another) This will be essential for the PQ transition. What best describes your organization's current crypto-agility maturity?

Select all that apply:

We have a fully crypto-agile approach (people, process, technology etc.) that is tried and tested

We have some proven crypto agility but can certainly improve

We are currently working on defining crypto agility processes

It is on our radar, but we cannot claim to be crypto-agile

Unsure

Do you feel like you have the right technology in place today to support things like the larger key lengths and computing power required with PQC?

Select one:

Yes

Unsure

Which team(s) in your organization will coordinate and manage the activities required to respond to the PQC issue?

Select all that apply:

Corporate cyber security team

Corporate IT team

Other

Individual lines of business

Not yet defined

BACK

CALCULATING YOUR
POST-QUANTUM
SELF-ASSESSMENT RESULTS

YOUR POST-QUANTUM
READINESS

Your results show that your path to Post-Quantum readiness is not where it should be. Let us help you navigate how to prepare for quantum the post quantum threat.

Contact our sales team to learn more about the Entrust Post Quantum Suite of Solutions and how they can help you prepare for PQC.

Complete this form to get
your full custom report

First name

Last name

Business email

Company

Business Phone

Country

State/Province

Job Level

Job Function