GRC в кибербезопасности Пунктов: 12
Post-Quantum Cryptography Readiness Assessment
Этот чек-лист на английском языке.
Assesses readiness for the migration to post-quantum cryptography covering cryptographic inventory, risk prioritization, crypto agility, and migration planning.
NIST PQCNIST 800-53CISA
Бесплатно в PDF или Word · укажите email, чтобы скачать.
Cryptographic Inventory
- Is a cryptographic bill of materials (CBOM) maintained for algorithms, key sizes, and protocols in use? *
- Are systems using quantum-vulnerable algorithms (RSA, ECC, DH) identified? *
- Are dependencies on third-party and embedded cryptography catalogued?
Risk Prioritization
- Is long-lived sensitive data assessed for harvest-now-decrypt-later risk? *
- Are systems prioritized for migration based on data sensitivity and lifespan? *
- Are contractual and compliance timelines for PQC migration understood?
Crypto Agility
- Are applications designed so cryptographic algorithms can be swapped without major rework? *
- Is cryptography centralized via libraries/services rather than hardcoded per application?
- Are vendors and suppliers queried on their PQC migration roadmaps?
Migration Planning
- Is a phased PQC migration roadmap aligned to NIST-standardized algorithms (ML-KEM, ML-DSA)? *
- Are hybrid (classical + PQC) schemes considered for transitional deployments?
- Is PQC testing planned to validate performance and interoperability before production?
Скачайте полный чек-лист «Post-Quantum Cryptography Readiness Assessment»
Получите его бесплатно в виде аккуратного PDF для печати или редактируемого документа Word.