Post-Quantum Cryptography

Korte beschrijving

PQC helps organizations counter quantum threats with secure algorithms and crypto agility. The training covers fundamentals, quantum impact, and translates insights into practical actions.

Inhoud

Public-key cryptography protects almost everything an organization runs on: network connections, application data, digital identities, software updates and signed transactions. A sufficiently powerful quantum computer breaks the mathematics behind that protection, RSA and elliptic-curve cryptography in particular.
The risk is not only a future one. Encrypted data that is captured and stored today can be decrypted later, once quantum computers exists. This is known as “harvest now, decrypt later”, and it means anything with a long confidentiality lifetime is already exposed: medical records, contracts, intellectual property, state secrets.
Post-quantum cryptography (PQC) is the family of algorithms designed to withstand that attack. NIST standardized the first of them in 2024, and European policy has since set a clear pace: national migration roadmaps in place by the end of 2026, high-risk use cases migrated by the end of 2030, and the remainder as far as feasible by 2035. Migration is rarely a matter of swapping one algorithm for another. Most organizations discover first that they do not know where their cryptography lives, who owns it, or how long replacing it would take.


This one-day training gives you a structured view of how cyber risk, cryptography and quantum computing relate, so you can make informed decisions instead of reacting to headlines. You will see how encryption works in practice and where it fails, how to translate the quantum threat into concrete organizational risk, and which solution patterns exist: post-quantum algorithms, hybrid deployments, cryptographic inventories and crypto-agility as a lasting capability across both IT and OT environments. Our trainers work on these migrations in practice and bring real examples, including what went wrong.
You do not need to be a cryptographer to attend. You do need to be able to explain, at the end of the day, why your organization should start now and what starting looks like.


Post-Quantum Cryptography (PQC) prepares your organization for a secure future in which quantum computing no longer poses a risk to your data and systems.

Doelgroep

No technical background is assumed. The training is built for the people who make, support or have to defend migration decisions:

• CISOs and security leadership setting the direction
• Risk and compliance officers assessing exposure and regulatory obligations
• Enterprise and solution architects designing systems that must outlive 2030
• IT and OT managers who own the affected platforms and budgets
• Business stakeholders and innovators who need the impact without the mathematics
• Anyone responsible for data that must stay confidential for years to come

Voorvereisten

None. No prior knowledge of cryptography or quantum physics is required; the training builds up from the fundamentals.

Doelstelling

After this training you can:

• Explain in business terms how cryptography protects confidentiality, integrity and authenticity, and where it sits in your security landscape
• Distinguish traditional public-key cryptography from post-quantum alternatives, and explain why symmetric encryption is affected differently
• Assess the impact of a cryptographically relevant quantum computer on your own systems, suppliers and products
• Estimate your organization’s exposure to “harvest now, decrypt later” based on data confidentiality lifetimes
• Compare mitigation strategies, including hybrid deployment, algorithm replacement, cryptographic inventory (CBOM) and crypto-agility
• Position your organization against the European migration milestones for 2026, 2030 and 2035
• Name the first three steps of a migration and who in your organization should own them