Updated guidance supports vendor talks on post-quantum cryptography
Published
Last reviewed
|
In partnership with the United States Cybersecurity and Infrastructure Security Agency (CISA) and the United States National Security Agency (NSA), we have updated our guidance on Post-quantum questions to ask your vendors.
The publication helps organisations engage with vendors and better understand how products, services and technologies may be affected by the transition to post-quantum cryptography.
As quantum computing capabilities continue to evolve, organisations should begin planning for future cryptographic migration. Early engagement with vendors can help organisations understand dependencies, identify potential risks and support informed technology planning.
The refreshed publication includes additional background information, clearer explanations of the post-quantum cryptography transition process and enhanced supporting context. It also reflects the international partnership between the authoring agencies and is designed to be applicable across a broader range of organisations and environments.
Organisations can use the publication to support vendor discussions, better understand cryptographic readiness and strengthen long-term cyber resilience.
