Training Course Professional

Post-Quantum Cryptography Standards Compliance for Government

Navigating NIST FIPS 203/204/205, NCSC guidance, and ETSI quantum-safe standards for government systems.

Full day (6 hours)
Certificate on completion
Enquire About This Course View Curriculum

Proud to recommend our expert members

Qrypto Cyber
Eclypses
Arqit
QuantBond
Krown
Applied Quantum
Quantum Bitcoin
Venari Security
QuStream
BHO Legal
Census
QSP
IONQ - ID Quantique
Patero
Entopya
Belden
Atlant3D
Zenith Studio
Qudef
Aries Partners
GQI
Upperside Conferences
Austrade
Arrise Innovations
CyberRST
Triarii Research
QSysteme
WizzWang
DeepTech DAO
Xyberteq
Viavi
Entrust
Qsentinel
Nokia
Gopher Security
Quside
QIZ
Global Quantum Intelligence
Qrypto Cyber
Eclypses
Arqit
QuantBond
Krown
Applied Quantum
Quantum Bitcoin
Venari Security
QuStream
BHO Legal
Census
QSP
IONQ - ID Quantique
Patero
Entopya
Belden
Atlant3D
Zenith Studio
Qudef
Aries Partners
GQI
Upperside Conferences
Austrade
Arrise Innovations
CyberRST
Triarii Research
QSysteme
WizzWang
DeepTech DAO
Xyberteq
Viavi
Entrust
Qsentinel
Nokia
Gopher Security
Quside
QIZ
Global Quantum Intelligence

Course Overview

For government regulators, standards body representatives, and procurement leads. Covers NIST FIPS 203/204/205 (ML-KEM, ML-DSA, SLH-DSA), draft FIPS 206, ETSI quantum-safe specifications, CNSA 2.0 algorithm suite, and practical guidance on embedding PQC standards into government procurement frameworks.

Curriculum

Course content is structured into sessions below. Each session is configurable to your organisation's environment, threat model, and objectives.

# Session Topics
1 The PQC Standards Landscape for Government What has been finalised, what is in draft, and what is coming
2 NIST FIPS 203, 204, 205, and Draft 206 Algorithm specifications, parameter sets, and government procurement implications
  • FIPS 203 (ML-KEM): Module-LWE key encapsulation, parameter sets (512/768/1024), key sizes, encapsulation performance, and government network throughput impact
  • FIPS 204 (ML-DSA) and FIPS 205 (SLH-DSA): lattice-based versus hash-based digital signatures, when government systems should use which, and the signature size trade-off
  • Draft FIPS 206 (FN-DSA): NTRU lattice-based signatures, compact signature sizes, timeline to finalisation, and whether to wait or proceed with ML-DSA
Break
3 ETSI and European Standards Framework ETSI QSC, ANSSI, BSI, and the EU Cybersecurity Act
  • ETSI TS 119 312: cryptographic suites for qualified electronic signatures and seals, PQC algorithm inclusion and government e-ID implications
  • ETSI TR 103 619: migration strategies for quantum-safe schemes, recommended hybrid approaches for government systems
  • National agency guidance: ANSSI (France) TR on PQC, BSI (Germany) Technical Guideline TR-02102, and their divergence from NIST recommendations
4 Interactive Demonstration: Standards Compliance Assessment Full-day format only
  • Running a compliance gap analysis against FIPS 203/204/205, ETSI TS 119 312, and CNSA 2.0 requirements simultaneously
  • Mapping a government IT estate to identify which systems require which PQC algorithms and parameter sets
  • Drafting PQC requirements for a government procurement specification using CCS framework language
Break
5 CNSA 2.0 and Allied Nation Requirements NSA algorithm suite and Five Eyes interoperability
  • CNSA 2.0 algorithm suite: ML-KEM-1024 for key establishment, ML-DSA-87 for digital signatures, LMS/XMSS for firmware signing, and the mandatory hybrid requirement
  • CNSA 2.0 timeline: 2025 preference, 2030 requirement for national security systems; implications for allied nations that interoperate with US classified networks
  • Five Eyes interoperability: how UK, Canada, Australia, and New Zealand are aligning (or diverging from) CNSA 2.0 requirements in their government procurement
6 Government Procurement and Contract Framework Integration Embedding PQC standards into government buying
  • Crown Commercial Service frameworks: how to specify PQC compliance in G-Cloud, DOS, and Technology Services 4
  • GovAssure alignment: mapping PQC standards to the GovAssure assessment profile for government IT systems
  • Contract clauses: model PQC compliance language for government IT procurement, including cryptographic agility requirements
7 Q&A and Compliance Planning

Designed and Delivered By

Training courses are designed and delivered by QSECDEF in collaboration with subject specialists. All instructors have direct experience in quantum technologies and security.

QD

Quantum Security Defence

Course design and delivery

QSECDEF brings expertise in post-quantum cryptography, quantum computing strategy, and defence-grade security assessment. Our membership spans 900+ organisations and 1,500+ professionals working at the intersection of quantum technologies and critical infrastructure security.

Enquire About This Course

Get in touch to discuss scheduling, group pricing, and how this course can be configured to your organisation's needs.

Contact Us
Training Courses Consulting Services Training