CycloneDX 2.0 Points Beyond a Static CBOM Toward Governed PQC Migration
CycloneDX 2.0 is expected to connect cryptographic inventory with owners, risks, evidence, target dates, and migration status. The preview shows why a…
Vista Insights
Cryptography is becoming an operating discipline.
Practical analysis for leaders building cryptographic visibility, sequencing post-quantum migration, governing risk, and producing evidence that stands up to scrutiny.
The library
PQC governance insights
Analysis, field notes, and product thinking for this topic.
-
-
Singapore’s Quantum-Safe RFI Shows Why PQC Procurement Needs Verifiable Evidence
Singapore is testing the market for quantum-safe products and services. Buyers should use the same moment to demand precise capability boundaries, cryptographic…
-
The HAWK Result Is a Case for Cryptographic Status, Not PQC Paralysis
HAWK’s withdrawal from NIST consideration shows why cryptographic inventories must distinguish candidates, standards, implementations, and deployments.
-
Federal Identity Is Becoming a Post-Quantum Inventory Problem
GSA’s quantum-resistant identity work demonstrates why agencies need a living inventory of algorithms, credentials, systems, vendors, and dependencies.
-
Canada’s PQC roadmap turns migration into an annual evidence cycle
Canada’s federal PQC roadmap requires plans, annual progress reporting, prioritized migration by 2031, and completion by 2035. Here is what the model…