Training Course Professional

Automotive Supply Chain Cryptographic Risk and PQC Migration

Cryptographic inventory and PQC migration planning for automotive Tier 1 and Tier 2 supply chain systems.

Full day (6 hours)
Certificate on completion
Enquire About This Course View Curriculum

Proud to recommend our expert members

Qrypto Cyber
Eclypses
Arqit
QuantBond
Krown
Applied Quantum
Quantum Bitcoin
Venari Security
QuStream
BHO Legal
Census
QSP
IONQ - ID Quantique
Patero
Entopya
Belden
Atlant3D
Zenith Studio
Qudef
Aries Partners
GQI
Upperside Conferences
Austrade
Arrise Innovations
CyberRST
Triarii Research
QSysteme
WizzWang
DeepTech DAO
Xyberteq
Viavi
Entrust
Qsentinel
Nokia
Gopher Security
Quside
QIZ
Global Quantum Intelligence
Qrypto Cyber
Eclypses
Arqit
QuantBond
Krown
Applied Quantum
Quantum Bitcoin
Venari Security
QuStream
BHO Legal
Census
QSP
IONQ - ID Quantique
Patero
Entopya
Belden
Atlant3D
Zenith Studio
Qudef
Aries Partners
GQI
Upperside Conferences
Austrade
Arrise Innovations
CyberRST
Triarii Research
QSysteme
WizzWang
DeepTech DAO
Xyberteq
Viavi
Entrust
Qsentinel
Nokia
Gopher Security
Quside
QIZ
Global Quantum Intelligence

Course Overview

For automotive CISOs, supply chain security leads, and procurement directors. Covers cryptographic trust chain mapping across OEM-tier-1-tier-2 boundaries, TISAX and ISO/SAE 21434 quantum compliance gaps, firmware signing migration, SBOM integrity, and supplier PQC readiness requirements.

Curriculum

Course content is structured into sessions below. Each session is configurable to your organisation's environment, threat model, and objectives.

# Session Topics
1 Automotive Supply Chain Cryptographic Landscape Mapping cryptographic dependencies across OEM, tier-1, and tier-2
2 Quantum Threats to Supply Chain Trust Chains How Shor and Grover break automotive supply chain cryptography
  • Code signing and firmware attestation: ECDSA and RSA signatures on ECU software, tier-1 component firmware, and supplier-provided binaries. Shor's algorithm breaks these entirely.
  • Procurement and contract authentication: TLS-protected supplier portals, EDI message signing, and certificate-based B2B authentication across OEM-supplier boundaries
  • SBOM integrity: Software Bill of Materials signing using X.509 certificates with RSA or ECDSA keys. A compromised signing chain allows undetectable component substitution.
Break
3 TISAX and ISO/SAE 21434 in a Post-Quantum Context Regulatory exposure and compliance gap analysis
  • TISAX information security assessment: current cryptographic requirements and where quantum threats create compliance gaps for OEMs and suppliers
  • ISO/SAE 21434 cybersecurity engineering: lifecycle cryptographic requirements from concept through decommissioning, and the quantum timeline intersection
  • UNECE WP.29 R155/R156: type approval implications when cryptographic foundations supporting CSMS (Cyber Security Management System) become quantum-vulnerable
4 Interactive Demonstration: Supply Chain Cryptographic Audit Full-day format only
  • Mapping a representative OEM-tier-1-tier-2 supply chain: identifying every cryptographic trust point from component procurement through final vehicle assembly
  • Risk scoring each dependency: classifying as quantum-vulnerable (ECDSA, RSA, ECDH), quantum-resistant, or hybrid-ready
  • Building a tiered migration plan: which supplier relationships need contractual PQC requirements first
Break
5 PQC Migration Strategy for Automotive Supply Chains Practical migration across multi-party trust boundaries
  • Firmware and code signing migration: transitioning ECDSA attestation to ML-DSA (FIPS 204) across OEM build systems and supplier CI/CD pipelines
  • SBOM signing with post-quantum algorithms: cosign, Notary v2, and in-toto attestation framework migration paths
  • Procurement contract clauses: requiring PQC readiness from tier-1 and tier-2 suppliers, with compliance verification timelines
6 Vendor Landscape and Cross-Industry Coordination Who is doing what in automotive PQC
  • OEM PQC programmes: published and in-progress initiatives from major automotive manufacturers
  • HSM and TPM readiness: current hardware security module support for FIPS 203/204/205 algorithms in automotive-grade components
  • Cross-industry coordination: Auto-ISAC, CATL, and tier-1 supplier working groups on quantum readiness
7 Q&A and Migration Planning

Designed and Delivered By

Training courses are designed and delivered by QSECDEF in collaboration with subject specialists. All instructors have direct experience in quantum technologies and security.

QD

Quantum Security Defence

Course design and delivery

QSECDEF brings expertise in post-quantum cryptography, quantum computing strategy, and defence-grade security assessment. Our membership spans 900+ organisations and 1,500+ professionals working at the intersection of quantum technologies and critical infrastructure security.

Enquire About This Course

Get in touch to discuss scheduling, group pricing, and how this course can be configured to your organisation's needs.

Contact Us
Training Courses Consulting Services Training