Quantum Computing and Cybersecurity: What Security Professionals Need to Know
Quantum computing will not break all encryption. It targets specific algorithm classes, and the data your organisation encrypts today may already be…
Blog
Insights & News
Expert analysis, quantum security news, and industry developments from QSECDEF. 224 articles across insights and news.
Articles — page 1 of 8
Quantum Computing Fundamentals: A Practical Guide for Security and Business Professionals
Quantum computing is not a general-purpose technology upgrade. It solves a bounded class of problems exponentially faster than classical hardware.…
Quantum Algorithms and Real-World Applications: What Security Professionals Need to Watch
Three algorithm classes define the quantum computing threat to enterprise security. Two require action now. One is widely misunderstood. This is what…
API Gateway PQC Readiness: Rate Limits and Handshake Performance
API platform engineers evaluating post-quantum TLS migration face two conflated questions: capability and performance under load. This analysis maps…
Cloud KMS PQC Readiness: AWS, Azure, and GCP Compared
Cloud security architects assessing post-quantum readiness for key management infrastructure face a consistent problem: the question of whether a…
5G PQC Vendor Readiness: 3GPP Standards Status and Operator Migration Priorities
MNO security architects planning 5G post-quantum migration are being told to wait for 3GPP Release 19. That framing is wrong and creating dangerous…
Container Image Signing in the PQC Era: Supply Chain Considerations
A production Kubernetes cluster trusts container images because those images carry valid Cosign or Notation signatures. Those signatures are valid…
HSM Procurement: Five PQC Readiness Criteria for 2026
Enterprise hardware security module fleets have five to ten year hardware lifecycles. An HSM purchased in 2024 with a seven-year operational life will…
IoT Device PQC: Firmware Migration for Constrained Environments
Picture a Cortex-M4-based industrial sensor that monitors pressure readings on a gas pipeline. It has 256 KB flash, 64 KB SRAM, and receives firmware…
Healthcare PQC Migration: HIPAA Obligations and Long-Lived Patient Data
Healthcare organisations hold data with longer mandatory retention periods than almost any other sector. A patient record created today may be held…
ISO 27001 and PQC: Mapping the 2022 Annex A to the Post-Quantum Transition
If your ISO/IEC 27001:2022 ISMS has a well-maintained control 8.24, a current cryptography policy, and an annual review cycle, you have a framework…
NIS 2 Implementation: Five Pillars for Cyber Resilience Officers
Article 21 of NIS2 Directive (EU) 2022/2555 sets out ten security measure categories that essential and important entities must implement. Ten…
PQC at the Application Layer: Database Encryption Migration
Organisations that have deployed hybrid TLS have protected data in transit. They have not protected data at rest in their databases. These are…
CNSA 2.0 Rollout Timeline: A Supplier's Perspective
The 2025 milestone dates in the CNSA 2.0 transition timeline are not future planning items. For any defence supplier with an active national security…
Financial Institution PQC Readiness: The Five Pillars
Financial institutions face a more complex PQC readiness problem than most sectors. The combination of live regulatory obligations, unusually long…
The Mosca Inequality Calculator: A Walkthrough for CISOs
CISOs are asked to justify PQC migration investment against uncertain timelines, crowded security budgets, and a board that wants to understand the…
Defence Supplier PQC Compliance: CMMC Readiness
CMMC has been a moving target for years. The final rule (32 CFR Part 170) was published in October 2024 and became effective December 2024. Most…
CNSA 2.0 Suite Implementation: A Detailed Walkthrough
The CNSA 2.0 preferred dates for software and firmware signing (2025) and network equipment (2026) have either passed or are current. This article…
FIPS 203 and 205 Implementation: C and Rust Library Maturity
Selecting ML-KEM or SLH-DSA as your post-quantum algorithm is the easy part. This article maps which C and Rust libraries implement the final FIPS 203…
PQC Migration Strategy Roadmap for Cybersecurity Leaders
Most organisations that have reached the CISO’s desk on PQC have the same problem: they have a list of exposures and no structure for acting on it.…
Critical National Infrastructure: A Quantum Security Sector Protection Roadmap
The distinctive concern for CNI operators is not data confidentiality alone. It is operational continuity. A compromised authentication channel in an…
PQC Supply Chain Risk: Evaluating Vendor Quantum Readiness
An organisation's post-quantum cryptography migration plan is only as strong as its most cryptographically exposed supplier. When your own TLS…
NIS2 and Quantum Risk: Closing the Gap in Your Cyber Resilience Plan
NIS2 does not specify algorithms. What it does require, under Article 21(2)(h), is that entities implement the use of cryptography and, where…
DORA Implementation Guide: A Step-by-Step Plan for Financial Services CTOs
The Digital Operational Resilience Act entered into application on 17 January 2025. Unlike GDPR, there was no two-year run-up between publication and…
Key Encapsulation Mechanisms Explained for Security Architects
Most post-quantum cryptography literature describes ML-KEM as "the NIST post-quantum key exchange." That framing is close enough for a headline, and…
Post-Quantum TLS: What Changes and What Stays the Same
Post-quantum TLS migration changes two things: the key exchange algorithm and, eventually, the certificate signature algorithm. The record layer, the…
CNSA 2.0 for Defence Contractors: Which Obligations Apply to Your Programmes
The common problem in defence contractor CNSA 2.0 planning is not a lack of awareness that the requirement exists. It is the gap between knowing it…
The Data Lifetime Problem: When Encryption Decisions Outlast the Threat Model
Every encryption decision is made against the threat model that exists at that moment. The data it protects may need to remain confidential for a…
CNSA 2.0 vs CNSA 1.0 for Quantum Key Management: What Is Changing in 2026 and 2027
The 2026 KMS deadline in NSA's CNSA 2.0 roadmap requires all new key management and PKI systems to support ML-KEM-1024 and ML-DSA-87 natively. This…
Quantum Security Governance: Building a Board-Level Framework
Quantum risk briefings are now common at board level. Governance is not. This article sets out a five-element framework using NIST CSF 2.0 as the…
Stay Informed
Subscribe to the QSECDEF newsletter for weekly updates on quantum security, new lecture recordings, and upcoming events.
Subscribe to Newsletter