Training Course Professional

Critical National Infrastructure Quantum Risk

Structured risk assessment for quantum threats across CNI sectors: energy, water, transport, and telecommunications.

Full day (6 hours)
Certificate on completion
Enquire About This Course View Curriculum

Proud to recommend our expert members

Qrypto Cyber
Eclypses
Arqit
QuantBond
Krown
Applied Quantum
Quantum Bitcoin
Venari Security
QuStream
BHO Legal
Census
QSP
IONQ - ID Quantique
Patero
Entopya
Belden
Atlant3D
Zenith Studio
Qudef
Aries Partners
GQI
Upperside Conferences
Austrade
Arrise Innovations
CyberRST
Triarii Research
QSysteme
WizzWang
DeepTech DAO
Xyberteq
Viavi
Entrust
Qsentinel
Nokia
Gopher Security
Quside
QIZ
Global Quantum Intelligence
Qrypto Cyber
Eclypses
Arqit
QuantBond
Krown
Applied Quantum
Quantum Bitcoin
Venari Security
QuStream
BHO Legal
Census
QSP
IONQ - ID Quantique
Patero
Entopya
Belden
Atlant3D
Zenith Studio
Qudef
Aries Partners
GQI
Upperside Conferences
Austrade
Arrise Innovations
CyberRST
Triarii Research
QSysteme
WizzWang
DeepTech DAO
Xyberteq
Viavi
Entrust
Qsentinel
Nokia
Gopher Security
Quside
QIZ
Global Quantum Intelligence

Course Overview

For CNI operators, government security leads, and sector regulators. Examines quantum threats to energy, water, transport, finance, and telecommunications infrastructure. Covers OT/SCADA cryptographic exposure, NCSC CAF alignment, NIS Regulations obligations, and sector-specific PQC migration strategies.

Curriculum

Course content is structured into sessions below. Each session is configurable to your organisation's environment, threat model, and objectives.

# Session Topics
1 The Quantum Threat to Critical National Infrastructure Why CNI operators face different quantum risks than enterprise IT
2 Operational Technology Cryptographic Exposure SCADA, ICS, and industrial protocol vulnerabilities
  • OT protocol cryptographic dependencies: Modbus/TCP (no native encryption), DNP3-SA (HMAC-SHA256, quantum-resistant for authentication but not for key exchange), IEC 62351 (RSA/ECDSA for IEC 61850/GOOSE/MMS)
  • SCADA system upgrade constraints: 15-30 year asset lifecycles, safety certification re-validation costs, and the cryptographic agility gap in legacy industrial controllers
  • IT/OT convergence risk: where enterprise TLS termination points expose OT networks to harvest-now-decrypt-later collection via compromised IT perimeters
Break
3 Regulatory Framework for CNI Quantum Migration NCSC, NIS, and sector-specific obligations
  • NCSC Cyber Assessment Framework (CAF): how Objective B (protecting against cyber attack) and Indicator B4 (system security) will incorporate PQC requirements
  • NIS Regulations 2018 and NIS2 Directive: operator of essential services obligations, incident reporting thresholds, and quantum risk as a "foreseeable" threat
  • Sector-specific regulators: Ofgem (energy), Ofwat (water), CAA (aviation), ORR (rail) compliance expectations for quantum readiness
4 Interactive Demonstration: CNI Quantum Risk Assessment Full-day format only
  • Mapping a CNI operator cryptographic inventory across IT and OT boundaries using the NCSC CAF structure
  • Prioritising migration by sector risk: which CNI sectors have the longest data sensitivity windows and shortest upgrade cycles
  • Modelling the cost of early PQC migration versus the cost of a late-stage mandate-driven rush
Break
5 CNI Sector-Specific Migration Strategies Energy, water, transport, finance, and telecommunications
  • Energy sector: IEC 62351 upgrade path, smart meter PKI (SMETS2/GBCS) quantum vulnerability, and the BEIS/DESNZ grid modernisation quantum readiness requirement
  • Telecommunications: 5G-AKA cryptographic chain exposure (covered in detail in the dedicated 5G workshop), fixed-line and backhaul TLS dependencies
  • Transport: ERTMS/ETCS signalling system authentication, connected vehicle V2X PKI (IEEE 1609.2), and aviation ACARS/ARINC 664 cryptographic dependencies
6 Supply Chain and Vendor Assessment for CNI PQC Evaluating vendor quantum readiness for critical infrastructure procurement
  • Crown Commercial Service G-Cloud and DOS framework: how to specify PQC requirements in government procurement
  • IEC 62443 Security Level alignment: mapping PQC capability to SL-1 through SL-4 for industrial control system procurement
  • Vendor PQC roadmap assessment: what to ask OT vendors about their cryptographic agility plans
7 Q&A and Migration Roadmap Planning

Designed and Delivered By

Training courses are designed and delivered by QSECDEF in collaboration with subject specialists. All instructors have direct experience in quantum technologies and security.

QD

Quantum Security Defence

Course design and delivery

QSECDEF brings expertise in post-quantum cryptography, quantum computing strategy, and defence-grade security assessment. Our membership spans 900+ organisations and 1,500+ professionals working at the intersection of quantum technologies and critical infrastructure security.

Enquire About This Course

Get in touch to discuss scheduling, group pricing, and how this course can be configured to your organisation's needs.

Contact Us
Training Courses Consulting Services Training