Training Course Professional

Cryptographic Inventory and Risk Assessment for Telecoms Operators

Building a cryptographic asset inventory and quantum risk register for telecoms network infrastructure.

Full day (6 hours)

Certificate on completion

Enquire About This Course View Curriculum

Proud to recommend our expert members

Course Overview

Practical workshop for security operations and network security teams at mobile network operators and fixed-line carriers. Covers cryptographic asset discovery methodology for multi-vendor RAN, core, and transport networks, CBOM construction, quantum vulnerability classification using ETSI and NCSC frameworks, and migration priority matrix development aligned with 3GPP, NIS2, and national telecoms security requirements.

Curriculum

Course content is structured into sessions below. Each session is configurable to your organisation's environment, threat model, and objectives.

#	Session	Topics
1	Telecoms Cryptographic Architecture Baseline Where cryptography lives across RAN, core, transport, and service layers
2	Cryptographic Discovery Methodology for Multi-Vendor Networks Building a Cryptographic Bill of Materials across heterogeneous telecoms infrastructure	RAN layer discovery: identifying cryptographic implementations in baseband units, fronthaul (eCPRI), and midhaul interfaces across Ericsson, Nokia, Samsung, and Open RAN vendors Core network cryptography: GTP-U/GTP-C tunnel encryption, 5G-AKA authentication, SUPI/SUCI privacy mechanisms, and SBA (Service Based Architecture) TLS dependencies Transport and backhaul: IPsec and MACsec implementations across MPLS/Segment Routing networks, peering points, and submarine cable landing stations
Break
3	Quantum Vulnerability Classification and Risk Scoring Mapping algorithm exposure to quantum threat timelines	Algorithm vulnerability taxonomy: classifying RSA, ECDH, ECDSA, AES, SHA across telecoms protocol stacks by quantum vulnerability category (broken, weakened, safe) Data sensitivity and harvest-now-decrypt-later: assessing which telecoms data flows carry information with secrecy lifetimes exceeding the quantum threat horizon Composite risk scoring: combining algorithm vulnerability, data sensitivity, exposure window, and remediation complexity into a prioritised migration matrix
4	Interactive Demonstration: Building a Telecoms CBOM Full-day format only	Working through a reference mobile network architecture to populate a Cryptographic Bill of Materials (CBOM) across RAN, core, transport, and OSS/BSS layers Applying the ETSI GR QSC 006 and NCSC quantum risk assessment frameworks to score each cryptographic dependency by migration urgency Generating a migration priority matrix that accounts for vendor dependency, standards timeline (3GPP Release 19/20), and operational risk
Break
5	Migration Planning and Vendor Readiness Turning the inventory into an actionable migration roadmap	Phased migration sequencing: prioritising SIM/USIM key agreement, then core network SBA interfaces, then RAN backhaul, based on exposure and feasibility Vendor readiness assessment: evaluating Ericsson, Nokia, Huawei, Mavenir, and Cisco PQC roadmaps against your specific network topology Regulatory alignment: mapping migration phases to NIS2 Directive timelines, national telecoms security requirements (UK TSA, German TKG, French ARCEP), and GSMA PQC guidance
6	Operational Continuity and Testing Strategy Migrating without degrading network performance or availability	Hybrid classical/PQC deployment: running ML-KEM alongside ECDH during transition to maintain backward compatibility with legacy equipment Performance testing methodology: measuring PQC handshake latency impact on 5G-AKA, GTP tunnel setup, and TLS session establishment at production traffic volumes Rollback planning: designing crypto-agile architectures that allow algorithm replacement without service interruption
7	Q&A and Organisation-Specific Planning

Designed and Delivered By

Training courses are designed and delivered by QSECDEF in collaboration with subject specialists. All instructors have direct experience in quantum technologies and security.

QSECDEF brings expertise in post-quantum cryptography, quantum computing strategy, and defence-grade security assessment. Our membership spans 900+ organisations and 1,500+ professionals working at the intersection of quantum technologies and critical infrastructure security.

Enquire About This Course

Get in touch to discuss scheduling, group pricing, and how this course can be configured to your organisation's needs.

Training Courses Consulting Services Training

Cryptographic Inventory and Risk Assessment for Telecoms Operators

Course Overview

Curriculum

Designed and Delivered By

Quantum Security Defence

Enquire About This Course