Post-quantum cryptography is often discussed as an encryption problem. That is only true.   Encryption matters. Long-life sensitive data matters. “Harvest now, decrypt later” matters. But post-quantum transition is not only about whether someone can read protected information in the future. It is also about whether digital systems can continue to trust identity, permissions, approvals,… Continue reading Why Access Control Must Be Part of PQC Transition

Security transition programs rarely fail because leadership does not care.   They fail because the organisation cannot see enough, coordinate enough, or retrieve the right evidence quickly enough when decisions need to be made.   Post-quantum cryptography transition is a good example. The challenge is not only technical. It is organisational.   A business preparing… Continue reading How Private AI Knowledge Systems Can Support Security Transition Programs

Continued. See  Where Quantum-Vulnerable Cryptography Hides in Ordinary Business Systems (part2) 6. Identity systems and access control   Post-quantum transition is not only about encrypted data. It is also about trust in identity.   Identity and access systems rely on certificates, keys, tokens, signed assertions, secure key exchange, identity federation, multi-factor authentication infrastructure and third-party… Continue reading Where Quantum-Vulnerable Cryptography Hides in Ordinary Business Systems (part3)