Eight services, from a first conversation to quantum-safe-by-design. Start where you are: each service has a defined aim, approach and result, and stands on its own.
Awareness
02Readiness insights
03Cryptography inventory (CBOM)
04Risks and roadmap
05Ownership and supply-chain actions
06Tested technical approach
07Changes and handover
08Quantum-safe-by-design
A shared view of quantum-safe cryptography and a concrete first step.
An interactive session tailored to your organisation.
Key considerations, relevant disciplines and recommended next steps.
Understand how your organisation manages cryptography and organises change.
Assessment of policy, ownership, processes and available information.
A readiness profile, key gaps and prioritised recommendations.
Insight into cryptographic usage and dependencies in a selected environment.
Collecting existing information, conducting agreed technical research and validating the findings.
An inventory with its limitations and follow-up recommendations, plus a Cryptography Bill of Materials (CBOM) where technically possible.
A substantiated sequence for research, decision-making and migration preparation.
Translating the available inventory into risks, dependencies and priorities.
A prioritised risk register, assumptions, a phased roadmap and a management summary.
Clear ownership and control over critical supplier dependencies.
Organise responsibilities and decision-making. Prioritise suppliers and identify follow-up questions.
A governance proposal, supplier overview, draft supplier questions and an action list.
A tested approach for one concrete technical scenario.
Determine the use case and success criteria, run a controlled trial and assess the findings.
A pilot plan, test findings and advice on adjusting, testing further or implementing.
Carry out agreed cryptographic changes in a controlled manner.
Develop and supervise defined work packages, including testing, acceptance and handover.
An implementation plan per work package, test results, outstanding actions and handover.
Track cryptographic risks and progress on improvements.
Periodically assess new findings and changes, report and update priorities.
An agreed management and reporting cycle with updated follow-up actions.
Our approach follows the steps that AIVD, NCSC and TNO recommend in the Dutch PQC migration handbook: inventory the risks, inventory your cryptographic assets, assess the risks and draw up a migration plan.
Along the way we look for "no-regret" measures, steps that pay off regardless of when Q-Day arrives, such as better key and certificate management and crypto-agile design.
Regulation & guidanceLeadership commitment, ownership and a first view of where you stand.
A CBOM, a risk register and a prioritised roadmap.
Supplier actions, tested approaches and controlled changes.
Monitoring, reporting and quantum-safe-by-design.