Post-Quantum Security
Understand your
quantum security exposure
Identify your IT assets, infrastructure and systems that may need to change as quantum-resistant standards are adopted. Assess your exposure and plan a phased transition to post-quantum cryptography with Getronics.
Overview
Understand your risk before making changes
In the near future quantum computers will put some widely used encryption methods, at risk. Commonly know as “Harvest Now Decrypt Later” (HNDL), encrypted information intercepted today may be stored for decryption in the future, creating a concern for data that must remain confidential for years. A survey of more than 2,600 digital trust professionals found that 95% of organisations lack a quantum computing roadmap
Preparing for post-quantum cryptography starts with understanding where your organisation uses cryptography and which applications and infrastructure depend on it, including your supply chain. Getronics helps you assess those dependencies, identify priorities and plan what to address first.
OUR SERVICES
Assess, prioritise and plan your transition
Assess cryptographic risk
Start with a three-month Proof of Risk Assessment (PORA) for a selected application or infrastructure segment. Then use the findings to define the budget for a full Risk Assessment, to extend discovery across your entire estate.
• Identify algorithms, certificates, keys and protocols in scope.
• Build a cryptographic inventory across applications, infrastructure, cloud, identity and public key infrastructure (PKI).
• Prioritise exposure by data sensitivity and business impact.
• Map relevant regional requirements and evidence needs.
Plan your post-quantum transition
Turn assessment findings into a phased migration plan that reflects business priorities and operational constraints.
• Set priorities, responsibilities, testing and acceptance criteria.
• Plan changes to hardware security modules (HSMs), PKI, cloud, applications and infrastructure.
• Account for supplier connections, dependencies and release cycles.
Manage cryptographic change over time
Maintain visibility of cryptographic dependencies and migration progress as your systems, suppliers and requirements change.
• Track certificates and encryption dependencies.
• Monitor cryptographic vulnerabilities and your security posture.
• Feed findings into your inventory and next migration steps.
• Connect incidents with existing IT service management (ITSM) and security information and event management (SIEM) processes.
Post-quantum intelligence
Getronics Post-Quantum Pulse is a free service to help your stay informed about developments in post-quantum cryptography, security standards and regional requirements.
• Track standards and regulatory changes by region
• Follow quantum research and developments that may affect the transition timeline
• Receive briefings on emerging risks and security developments
• Monitor regional compliance deadlines and milestones
Assess cryptographic risk
Start with a three-month Proof of Risk Assessment (PORA) for a selected application or infrastructure segment. Then use the findings to define the budget for a full Risk Assessment, to extend discovery across your entire estate.
• Identify algorithms, certificates, keys and protocols in scope.
• Build a cryptographic inventory across applications, infrastructure, cloud, identity and public key infrastructure (PKI).
• Prioritise exposure by data sensitivity and business impact.
• Map relevant regional requirements and evidence needs.
Manage cryptographic change over time
Maintain visibility of cryptographic dependencies and migration progress as your systems, suppliers and requirements change.
• Track certificates and encryption dependencies.
• Monitor cryptographic vulnerabilities and your security posture.
• Feed findings into your inventory and next migration steps.
• Connect incidents with existing IT service management (ITSM) and security information and event management (SIEM) processes.
Plan your post-quantum transition
Turn assessment findings into a phased migration plan that reflects business priorities and operational constraints.
• Set priorities, responsibilities, testing and acceptance criteria.
• Plan changes to hardware security modules (HSMs), PKI, cloud, applications and infrastructure.
• Account for supplier connections, dependencies and release cycles.
Post-quantum intelligence
Getronics Post-Quantum Pulse is a free service to help your stay informed about developments in post-quantum cryptography, security standards and regional requirements.
• Track standards and regulatory changes by region
• Follow quantum research and developments that may affect the transition timeline
• Receive briefings on emerging risks and security developments
• Monitor regional compliance deadlines and milestones
Findings & deliverables
Clear findings. Practical next steps.
Post Quantum One gives technical teams and leadership a shared view of cryptographic exposure, priorities and decisions. Use evidence from the agreed assessment scope to decide what needs further investigation and where investment is justified.
01
Cryptographic Inventory
Record where cryptographic algorithms, certificates, keys and protocols are used within the systems assessed. Document dependencies and gaps that need further investigation.
02
Prioritised risk and requirements
Review findings against data sensitivity, business impact, supplier dependencies and confidentiality requirements. Map relevant regional requirements within the agreed scope.
03
Leadership summary and roadmap
Summarise exposure, key decisions and recommended next steps. Use the findings to shape a phased plan and support investment discussions.
INDUSTRY PRIORITIES
Plan around your industry’s requirements
Finance & Insurance
Assess cryptographic risks across financial data, transactions, policy records and third-party systems to prioritise migration around business and regulatory needs.
Healthcare
Prioritise patient information that must remain confidential, alongside connected systems and equipment with different support arrangements and replacement cycles.
Transport
Review cryptographic dependencies across operational systems, business applications and supplier connections that support transport operations. Identify what should be included in post-quantum planning.
Insights & Resources
Post-Quantum Security Insights
View all insights
CONTACT US
Discover how to assess your exposure
Talk to an expertRelated Solutions
Explore More Cybersecurity Solutions
Talk to an expert
FAQs
You have questions. We have answers.
Post-quantum cryptography refers to cryptographic methods designed to resist attacks from future quantum computers. Organisations can prepare by identifying where cryptography is used, assessing dependencies and planning any necessary changes.
Our assessment focuses on cryptographic security. We identify dependencies within an agreed scope, assess their business significance and highlight changes or further investigation needed.
A PORA is an initial assessment of a selected application or infrastructure segment. It identifies cryptographic dependencies in scope and provides technical findings and a leadership summary to support decisions about next steps.
Yes. An initial assessment examines a selected application or infrastructure segment over three months. We agree access, permissions, discovery methods and required outputs before work begins.
You’ll need a named sponsor, an agreed scope, approval through your change process, and time from relevant application and technical contacts. Access requirements are agreed with your teams before discovery starts.
No. Risks differ by algorithm, implementation and use case. An assessment helps establish what needs migration and what can be addressed through planned technology upgrades.
A cryptographic inventory records where and how cryptography is used across the systems assessed. It helps teams understand dependencies, assign ownership and plan migration, while documenting areas where more discovery is needed.
Crypto agility is the ability to change cryptographic methods as security standards and technology evolve, while keeping systems secure and operational.