Training Course Professional

Quantum Threat Modelling for Enterprise Security

Structured threat modelling methodology for quantum attack surfaces across enterprise security architecture.

Half day (3 hours)
Certificate on completion

Proud to recommend our expert members

Qrypto Cyber
Eclypses
Arqit
QuantBond
Krown
Applied Quantum
Quantum Bitcoin
Venari Security
QuStream
BHO Legal
Census
QSP
IONQ - ID Quantique
Patero
Entopya
Belden
Atlant3D
Zenith Studio
Qudef
Aries Partners
GQI
Upperside Conferences
Austrade
Arrise Innovations
CyberRST
Triarii Research
QSysteme
WizzWang
DeepTech DAO
Xyberteq
Viavi
Entrust
Qsentinel
Nokia
Gopher Security
Quside
QIZ
Global Quantum Intelligence
Qrypto Cyber
Eclypses
Arqit
QuantBond
Krown
Applied Quantum
Quantum Bitcoin
Venari Security
QuStream
BHO Legal
Census
QSP
IONQ - ID Quantique
Patero
Entopya
Belden
Atlant3D
Zenith Studio
Qudef
Aries Partners
GQI
Upperside Conferences
Austrade
Arrise Innovations
CyberRST
Triarii Research
QSysteme
WizzWang
DeepTech DAO
Xyberteq
Viavi
Entrust
Qsentinel
Nokia
Gopher Security
Quside
QIZ
Global Quantum Intelligence

Course Overview

For security architects, red team leads, and enterprise risk managers. Covers quantum extensions to STRIDE and PASTA threat modelling frameworks, cryptanalytic timeline assessment using Mosca inequality and expert survey data, attack surface analysis for enterprise cryptographic dependencies, and board communication frameworks for escalating quantum risk findings.

Curriculum

Course content is structured into sessions below. Each session is configurable to your organisation's environment, threat model, and objectives.

# Session Topics
1 Quantum Threat Vectors in Enterprise Environments Cryptanalytic timelines and attack surface analysis for enterprise security teams
2 Extending STRIDE and PASTA for Quantum Threats Integrating quantum attack vectors into existing threat modelling frameworks
  • STRIDE quantum extensions: Spoofing (forged digital signatures via quantum factoring), Tampering (integrity compromise of signed artefacts), Repudiation (quantum-broken non-repudiation), Information Disclosure (HNDL decryption of captured traffic), Denial of Service (certificate revocation cascades), Elevation of Privilege (compromised authentication tokens)
  • PASTA quantum integration: adding quantum threat scenarios to the seven-stage Process for Attack Simulation and Threat Analysis. Stage 2 (threat enumeration) and Stage 5 (vulnerability analysis) are the primary extension points.
  • Mosca inequality as a threat modelling input: using cryptanalytic timeline estimates to assign quantum threat likelihood ratings within existing risk matrices
Break
3 Cryptanalytic Timeline Assessment Estimating when quantum computers will break deployed cryptography
  • Current state of quantum hardware: superconducting (IBM, Google), trapped ion (Quantinuum, IonQ), and neutral atom (QuEra, Pasqal) approaches. Logical qubit counts and error correction progress.
  • Expert timeline estimates: Mosca survey data, Global Risk Institute annual assessments, and government intelligence community guidance (NSA, GCHQ, BND). Range: 2030-2045 for RSA-2048.
  • Organisational risk appetite: mapping optimistic, median, and conservative CRQC timeline assumptions to enterprise risk tolerance levels for different data sensitivity classes
4 Board Communication and Risk Escalation Translating quantum threat models into business risk language
  • Risk register integration: adding quantum cryptographic risk as a line item in the enterprise risk register with quantified impact, likelihood (tied to CRQC timeline), and mitigation status
  • Board-ready threat summary: a one-page format that communicates quantum risk without requiring technical literacy. Includes timeline visualisation, financial exposure estimate, and recommended investment.
  • Regulatory escalation triggers: when quantum risk assessment findings require notification to regulators, board committees, or audit functions under NIS2, DORA, or sector-specific frameworks

Designed and Delivered By

Training courses are designed and delivered by QSECDEF in collaboration with subject specialists. All instructors have direct experience in quantum technologies and security.

QD

Quantum Security Defence

Course design and delivery

QSECDEF brings expertise in post-quantum cryptography, quantum computing strategy, and defence-grade security assessment. Our membership spans 900+ organisations and 1,500+ professionals working at the intersection of quantum technologies and critical infrastructure security.

Enquire About This Course

Get in touch to discuss scheduling, group pricing, and how this course can be configured to your organisation's needs.

Contact Us