Security architects and transformation leads
Preparation for your quantum security transformation.
CPQCPM · Five-week instructor-led
Certificated
Partner Course Members save 25% 5 Weeks 10 Hours Live
CPQCPM - Certified Post Quantum Cryptography Programme Manager
Post-quantum cryptographic defence for critical enterprise. A practical introduction to becoming quantum ready.
Five weeks, live and instructor-led, built for the people who will sign, plan and ship a post-quantum migration. Delegates assess their organisation's cryptographic estate against the quantum threat, then produce and begin executing a prioritised, standards-aligned migration plan.
Taught by Chris Basener of Argus Advisory LLC. Completion leads to the CPQCPM: Certified Post Quantum Cryptography Programme Manager credential.
We are running live public cohorts and private group training for teams now.
Online or In Person Max 18 per cohort
Request the brochure, course dates and costings for this course. This course is taught by a QSECDEF member and is certificated by QSECDEF.
Request information delivered instantly by email.
New Programme - Q4 2026. Our new premium courses are available from professional QSECDEF training partners.
Live online public cohorts: $1,450 per seat. 18 seats per cohort. January and February 2027.
5 Weeks Part-time, live
10 Hours Live instruction and tabletop simulation
Online or In Person Both delivery modes
Max 18 Group size
For the people who will sign, plan and ship the migration
PKI, platform and identity leads, crypto owners
Hybrid certificates, key hierarchies and protocol rollout.
CISOs and risk officers
Quantify exposure by data lifetime and defend the programme budget with evidence.
Defence and government suppliers
Map controls to CNSA 2.0 and NIST timelines ahead of contractual deadlines.
Prerequisite. Working knowledge of TLS, PKI and enterprise key management. No quantum physics required.
What you can do by week five
01 · Inventory the cryptographic estate
Discover keys, certificates, algorithms and dependencies across applications, network and third parties.
02 · Rank exposure by data lifetime
Build a defensible risk model that tells you what to migrate first and what can wait.
03 · Understand core hybrid PQC concepts in production
Stand up ML-KEM key exchange and ML-DSA signing alongside classical algorithms, with rollback.
04 · Run the programme to a deadline
Sequence workstreams, brief the board and evidence progress against NIST and CNSA 2.0 milestones.
Five modules. Five weeks. Two hours per week. One migration plan.
Weeks 1–2 · Foundations and assessment. Weeks 3–5 · Build, deploy and govern.
Understanding the quantum threat model
Week 1
Understanding the quantum threat model
Week 1
The opening module establishes the macro context of post-quantum cryptography, bridging theoretical physics and executive governance.
Quantum risk is an immediate fiduciary vulnerability rather than a distant IT concern alone. The technical session details Shor’s algorithm and its capability to solve prime factorisation and discrete logarithms in polynomial time, collapsing RSA and ECC security foundations.
Students analyse the economics of Harvest Now, Decrypt Later attacks, where adversaries intercept encrypted enterprise traffic today to decrypt once a Cryptographically Relevant Quantum Computer materialises. The regulatory section maps global mandates, focusing on the NSA Commercial National Security Algorithm Suite 2.0 (CNSA 2.0), White House OMB Memorandum M-23-02, and G7 Cyber Expert Group guidelines.
Project managers will be taught to frame PQC business cases effectively for C-suite alignment.
This course is written and delivered by Argus Advisory LLC, New York, USA, and certified by QSECDEF.
Technical Foundations of NIST PQC Standards and Architectural Constraints
Week 2
Technical Foundations of NIST PQC Standards and Architectural Constraints
Week 2
Module 2 covers the mathematical standards published in August 2024: FIPS 203 (ML-KEM), FIPS 204 (ML-DSA), and FIPS 205 (SLH-DSA). Rather than reviewing formal algebraic proofs, instruction focuses on performance trade-offs, operational constraints, and architectural impact. Students examine how Module-Lattice-Based Key-Encapsulation Mechanisms (ML-KEM) replace RSA/ECDH key exchanges in TLS handshakes, analysing key sizes and computational overhead.
Digital signature schemes are evaluated by comparing ML-DSA (primary lattice signature) with SLH-DSA (stateless hash-based signature backup). The operational narrative explores the hardware impact of larger key and signature sizes, detailing how packet size bloat induces MTU fragmentation, increases network latency, and exceeds memory limits in legacy Hardware Security Modules (HSMs) and fixed silicon ROM roots of trust.
This course is written and delivered by Argus Advisory LLC, New York, USA, and certified by QSECDEF.
Cryptographic Inventory, CBOM Auditing, & Risk Prioritisation
Week 3
Cryptographic Inventory, CBOM Auditing, & Risk Prioritisation
Week 3
Module 3 provides actionable methodologies for discovering and categorising enterprise cryptographic assets. Instructors walk through passive network discovery, static code analysis, and automated scanning tooling. Students examine the OWASP CycloneDX 1.6/1.7 specification for Cryptographic Bills of Materials (CBOM), learning to audit standardised JSON structures that represent algorithms, key lengths, certificates, and underlying hardware dependencies. Risk prioritisation is governed by Mosca’s Theorem (X + Y > Z), where data shelf-life (X) and migration execution time (Y) are weighed against predicted CRQC timelines (Z).
Students deploy Quantum-Adjusted Risk Scoring (QARS) frameworks to rank high-risk data assets, establishing an evidence-based queue for migration.
This course is written and delivered by Argus Advisory LLC, New York, USA, and certified by QSECDEF.
Migration Lifecycle, Crypto-Agility Architecture, and GRC Integration
Week 4
Migration Lifecycle, Crypto-Agility Architecture, and GRC Integration
Week 4
Module 4 explores migration execution, crypto-agile software architecture, and GRC integration. The curriculum details the multi-phase migration roadmap defined in NIST SP 1800-38 and ETSI TR 104 016 guidelines. Students evaluate the operational trade-offs of hybrid migration strategies (layering post-quantum algorithms alongside classical schemes) versus direct algorithm replacement.
Software architecture is evaluated using a seven-component decoupling framework (evaluating operation coupling C1, creation coupling C2, provider coupling C3, decoupling mechanisms C4, and authority C5) to isolate cryptographic calls behind dynamic abstraction layers. From a GRC perspective, project managers learn to map PQC migration milestones directly into ISO/IEC 27001, SOC 2, and BSI C5 control frameworks, while establishing communication plans and maturity scoring models across enterprise business units.
This course is written and delivered by Argus Advisory LLC, New York, USA, and certified by QSECDEF.
Supply Chain Risk, Stakeholder EQ Leadership; Tabletop Capstone
Week 5
Supply Chain Risk, Stakeholder EQ Leadership; Tabletop Capstone
Week 5
The final module focuses on third-party risk management, stakeholder emotional intelligence (EQ), and operational simulation. Project managers learn to evaluate supply chain vulnerabilities, audit vendor software roadmaps, and enforce PQC readiness requirements in procurement contracts. The leadership segment addresses organisational psychology, providing project managers with EQ tools to overcome temporal discounting, ambiguity aversion, and classical cryptographer expertise entrenchment.
The course culminates in an interactive Tabletop Exercise (TTX) simulation, where students navigate real-world injects, such as vendor non-compliance, hardware limitations, and budget shifts, deploying communication frameworks, stakeholder matrices, and executive decision templates in real time.
This course is written and delivered by Argus Advisory LLC, New York, USA, and certified by QSECDEF.
Tabletop exercise capstone and CPQCPM examination
Available after completing all five modules
STO Summer School: Dual-use quantum technologies
ChannelNATO Science & Technology Organization
We are delighted to collaborate and share our knowledge with STO Summer School on Dual-use quantum technologies. Play the video to find out more.
Three ways to run it
Option A · Live online · 3 public cohorts available
$1,450 per seat, 18 seats per cohort
Ten hours of live online instruction over five weeks, maximum 18 delegates. Cohorts start Friday 8 January and Friday 26 February 2027.
Option B · Most popular · Private cohort
Contact Sales
Available in person in New York City, East Coast USA, for up to 20 people.
Option C · Live online · Private cohort
Contact Sales
Ten hours of private live online sessions across five weeks.
Excludes VAT. Volume and public-sector rates on request.
Open Public Cohorts: January and February 2027
January 2027 cohort
- Session 1 · Week 1View the session on LinkedIn
Understanding the quantum threat model
Friday 8 January 2027 · 4pm CET / 3pm GMT
- Session 2 · Week 2View the session on LinkedIn
Technical Foundations of NIST PQC Standards and Architectural Constraints
Friday 15 January 2027 · 4pm CET / 3pm GMT
- Session 3 · Week 3View the session on LinkedIn
Cryptographic Inventory, CBOM Auditing, & Risk Prioritisation
Friday 22 January 2027 · 4pm CET / 3pm GMT
- Session 4 · Week 4View the session on LinkedIn
Migration Lifecycle, Crypto-Agility Architecture, and GRC Integration
Friday 29 January 2027 · 4pm CET / 3pm GMT
- Session 5 · Week 5View the session on LinkedIn
Supply Chain Risk, Stakeholder EQ Leadership; Tabletop Capstone
Friday 5 February 2027 · 4pm CET / 3pm GMT
February 2027 cohort
- Session 1 · Week 1
Understanding the quantum threat model
Friday 26 February 2027 · 4pm CET / 3pm GMT
- Session 2 · Week 2
Technical Foundations of NIST PQC Standards and Architectural Constraints
Friday 5 March 2027 · 4pm CET / 3pm GMT
- Session 3 · Week 3
Cryptographic Inventory, CBOM Auditing, & Risk Prioritisation
Friday 12 March 2027 · 4pm CET / 3pm GMT
- Session 4 · Week 4
Migration Lifecycle, Crypto-Agility Architecture, and GRC Integration
Friday 19 March 2027 · 4pm CET / 3pm GMT
- Session 5 · Week 5
Supply Chain Risk, Stakeholder EQ Leadership; Tabletop Capstone
Friday 26 March 2027 · 4pm CET / 3pm GMT
CPQCPM · Certified Post Quantum Cryptography Programme Manager
The delegate has demonstrated the capability to guide a post-quantum cryptography programme based on a tabletop exercise capstone, completed 10 hours of instruction, 50 question multiple choice exam (10 per module) and a one-to-one Q&A session with the trainer.
Yours to keep. The credential does not expire with membership and remains verifiable.
- Instruction
- 10 hours
- Exam
- 50 questions, 10 per module
- Q&A
- One-to-one session with the trainer
Certificated by Quantum Security Defence (UK).
Quantum Security DefenceInternational Members Organisation
Certificate of Completion
CPQCPM · Certified Post Quantum Cryptography Programme Manager
Awarded to
Who teaches the CPQCPM - Certified Post Quantum Cryptography Programme Manager
Meet our quantum security experts for the full team.
Argus Advisory LLC, New York, USA
Chris Basener is an Information Security Management professional with over 20 years of experience in consulting and project leadership. He specialises in helping boards, C-suites and SMBs align cybersecurity strategy with business objectives, mitigating enterprise, legal, and reputational risk while driving profitability. His expertise spans GRC, enterprise risk assessment, and building risk-aware cultures through targeted training and long-term maturity programmes. Chris completed MIT xPRO's Quantum Computing: Strategy and Impact, QSECDEF's Introduction to Quantum Cyber Security certification, and ISACA's AAISM credential. A former Director of Security for PMINYC Chapter, Chris combines strategic insight with hands-on execution.
Community feedback
What the QSECDEF community says
Reviews for QSECDEF courses, events and certifications
What you get as a member
Membership puts the courses, the lecture library, the weekly call and the people behind them in one place, with 25% off partner training and events.
Included in membership
-
Access our QSECDEF Training Courses
Your membership includes the introductory quantum cyber security and quantum resilient blockchain courses, plus the Business Bootcamp. Each ends in a certificate, so your team can study at its own pace and show what it completed.
See the courses -
Access over 170 expert lectures
More than 170 lectures from practising experts sit in the member library. Topics run from post-quantum cryptography and QKD to sensing, PNT and quantum business. Watch when your diary allows, then return to the ones you need.
Browse the lectures -
One new training course live every 90 days
We commit to publishing a new training course every 90 days, so the programme keeps pace with the field. Your membership covers each one as it goes live, with no extra fee for the course.
See current courses -
Discounts on partner delivered courses and certifications
Members save 25% on partner training and certifications, including the CPQCPM Post Quantum Cryptography Programme Manager certification. The discount applies at booking, so the saving comes before you pay.
View the certification -
In person events invitations, members only event invitations
Members receive invitations to our in-person events, including our London, Amsterdam and Berlin events, plus private members-only briefings and priority access to the QSECDEF members’ symposium 2027 in Paris.
See upcoming events -
Priority access for our weekly live call every Tuesday
Every Tuesday at 3pm CET, a practitioner presents a live topic and takes questions. Members get priority access to the call and the recorded archive afterwards, so a missed week is never lost.
Join Tuesday's call -
Access a peer network of experts, practitioners and learners
Join 1,500+ members across 40+ countries and 900+ organisations. The community directory and learning management system are open for you instantly on membership, so you know whose profile to open when you need a second opinion.
Meet the experts -
Discounts on partner events, workshops and tradeshows
Partner events cost members 25% less. Membership also brings discounted rates on in-house workshops and priority access to QSECDEF annual events, including the Paris Symposium.
See membership benefits -
Focus on human interaction
Quantum security is decided by people. Ask your question live on Tuesday's call, put it to a speaker at a members' briefing, or shake hands at the London and Paris events. A human answers.
See how we meet -
Global access
Members work in more than 40 countries. The 2026 symposium speakers came from NATO STO, the European Commission, Nokia, Rheinmetall and MBDA. See which organisations sit in the network.
View member organisations
Why membership?
All four courses and 170+ lectures included
Find the right membership for you
Become a memberCPQCPM - Certified Post Quantum Cryptography Programme Manager: common questions
Who is this for?
Anyone likely to have oversight or a need to understand the programme manager for a cryptographic transition to post quantum cryptography. Cryptographers struggling with justifying business or risk, national cyber agencies, defence primes, heads of transformation and CISOs who need to understand exactly what a PQC transformation entails from a business and programme management perspective.
Do I need a background in quantum physics?
No. The prerequisite is a basic understanding of cybersecurity from any perspective. The onus is on us to explain TLS, PKI and enterprise key management. Each course is also tailored to your jurisdiction and relevant standards (US, UK, EU or international) during the one-to-one session. No quantum physics is required.
How much time does it take?
Five weeks, at two hours a week, for ten hours of live instruction and tabletop simulation in total.
How is it delivered?
The public cohort runs live online. Private cohorts run live online or in person in New York City, East Coast USA. Public cohorts are capped at 18 delegates. Private cohorts take up to 20.
What do I get at the end?
The CPQCPM credential, awarded after the tabletop exercise capstone, the 50-question multiple choice exam (10 per module) and a one-to-one Q&A session with the trainer.
Who teaches it?
Chris Basener of Argus Advisory LLC, New York, USA.
Which standards does it cover?
Each course includes a 30-minute session to cover your own regulatory requirements based on your jurisdiction or multiple international jurisdictions. We cover FIPS 203, FIPS 204 and FIPS 205, CNSA 2.0, OMB Memorandum M-23-02, NIST SP 1800-38, ETSI TR 104 016, the OWASP CycloneDX CBOM specification, ISO/IEC 27001, SOC 2, and BSI C5, and others as relevant.
What does the non-member option include?
Non-members who take the course for $1,450 currently receive lifetime QSECDEF membership with no continuing certification fees, no certification fees. The certificate is attached to you via QSECDEF and does not expire. Online access to the course materials is available to you, and you also benefit from all of the QSECDEF bootcamp courses, the exhaustive library and the benefits of membership. This offer will expire on 1 March 2027.
What is included for members?
Members pay a reduced fee for the course of $1,086, which represents a 25% discount. Members can upgrade via their membership portal on QSECDEF.
Why do companies and individuals choose QSECDEF for training?
QSECDEF is a members' organisation with more than 1,500 members in 40+ countries who police, check and validate our materials. We were the first company ever to launch training on PQC with our basics in Quantum Cyber Security course.
We focus on the business, process and governance of deep tech adoption, with cybersecurity being a core pillar, and compute, secure communications and governance being the others. QSECDEF has issued more than 700 certificates in Post Quantum Cryptography, Quantum Cybersecurity, Quantum Computing and other quantum subjects. Customer satisfaction scores and renewal rates benchmark among the highest in the industry due to the focus of QSECDEF on providing continuous education to its members in quantum technology.
We are growing fast. We provide a modern way for busy executives to secure the required certifications while setting them up for success. Courses are based on real human interaction, not AI modules, sharing of experiences, and include introductions to other members who are in the process of their own quantum transformation programme.
Over 170 experts have contributed lectures on the subject on the QSECDEF platform. QSECDEF members represent 900 practitioner companies across a broad spectrum of industry. More than 50,000 people follow us and subscribe to our news and updates.
When you take your training with us, you join the community, a support system and a knowledgeable base of experienced experts to help you with successful transformation efforts.
Members also access the QSECDEF annual symposium in Paris.
Education standards guidance
We take guidance from the following open frameworks for technical education: EQAVET, the European Quality Assurance Reference Framework for Vocational Education and Training; the European Union Council Recommendation on micro-credentials; the CAST Universal Design for Learning Guidelines; and WCAG 2.2, the web accessibility standard. Educational oversight: QSECDEF Advisory Board. Feedback, errors, omissions and updates: QSECDEF Community.
Between cohorts, the free weekly quantum security webinar runs every Tuesday. Open to all registrants.
Want to discuss this certificated course?
Contact us to discuss your individual requirements.
Contact Us