Skip to main content

From first briefing to a signed-off roadmap, in five defined stages.

ML-KEM, ML-DSA and SLH-DSA are public NIST standards, and that is a strength. The hard part is applying them safely across every system, vendor and team. That is the work we do with you.

Book an executive briefing

Executive briefing

Two hours with your board, council or C‑suite on the threat, the standards and the five questions to ask.

Duration
2 hours
Audience
Board, council or C‑suite
Format
On site or online
Outcome
The five questions below and your first 90-day actions

Five questions every board should ask

  1. Who owns cryptography in our institution?

  2. Do we have an inventory of algorithms, keys, certificates and vendors?

  3. Which data must stay secret beyond 2035?

  4. What do our contracts require?

  5. Who reports progress to me, and how often?

Readiness assessment

A scoped first assessment, run through our readiness programme. Each stage ends with a defined output, signed off before the next begins.

Scope
One service or subsidiary
Duration
4 to 8 weeks
Outcome
A phased roadmap with owners, costs and dependencies
  1. Sponsor alignmentA named owner and an approved non-production boundary.
  2. DiscoveryAlgorithms, keys, certificates, vendors and data lifetime captured.
  3. PrioritisationA ranked backlog signed off by business and risk.
  4. PilotCompatibility, latency, rollback and monitoring recorded.
  5. RoadmapA phased plan with owners, costs and dependencies.

Your keys, your data, your jurisdiction.

We never name a client without permission.

NDA first
Every engagement begins under a non-disclosure agreement.
Non-production first
Before any work begins, we agree a non-production boundary with your named owner.
Inside your boundary
We work within your environment. Your data stays with you, in your jurisdiction.

What we review

  • Algorithms and key lengths
  • Certificates
  • Protocols
  • Vendors

What never leaves your environment

  • Customer records
  • Payloads

Advisory retainer

Continued support after the first assessment.

  • Regulators’ questions
  • Vendor and procurement reviews
  • Board reporting

Start with an executive briefing.

Two hours with your board, council or C‑suite on the threat, the standards and the five questions to ask. On site or online.

Book an executive briefing
Reply
Within 1 business day
Clients
We never name a client without permission.