Licensed assessor network

Assessors outside QCI can apply for a license to conduct independent assessments against QCI-QS1. This page sets out who is eligible, the four-step licensing process, the fee, and the public register of current licenses.

Why outside assessors

QCI publishes the standard and may also help clients build their readiness record. It cannot independently assess its own work. A licensed outside assessor makes and signs their own determination, without QCI directing findings. Read the assessment independence policy.

Eligibility

Applicants must meet all six criteria.

Assessment experience. A record of audit, assurance or risk assessment work, with signed findings you can describe.
Cryptography and risk knowledge. Working knowledge of cryptographic inventory, key management and migration planning, or a partner in your firm who has it.
Independence from QCI. Not employed by or contracted to QCI, and no share in QCI's fees for the clients you would assess.
Independence from the client. No readiness, implementation or advisory work for the client's assessed boundary in the prior 12 months.
Qualification. Pass the written exam and the supervised first assessment described below.
Quality review. Agree to QCI quality review of your assessments and to the complaints and appeal procedure.

Licensing process

01
Application review
QCI reviews your application against the eligibility criteria and your declared conflicts.
02
Written exam on QCI-QS1
A written exam on the standard's clauses, gates and scoring. You must pass before a supervised assessment is arranged.
03
Supervised first assessment
A QCI reviewer observes your first assessment. The determination is yours; the reviewer assesses method, not findings.
04
Renewal and quality review
Licenses run for two years. Renewal follows a quality review of assessments completed during the term.

Initial license fee: $995, due before the license is issued.
Renewal fee: $795 every two years, due before the license is renewed.
Payment: Invoiced by email, Net 30.
License decision: Signed by Bryant Nielson.

A license authorizes the holder to conduct and sign independent assessments against QCI-QS1. It does not make the holder an agent of QCI. No license is required to use the published standard.

Written exam: what it covers

The exam is arranged by email once your application passes review. The format, time allowed and pass mark are sent with the invitation. It covers six areas.

1. Structure of QCI-QS1. Clauses 1 to 8, the Annexes, and how sector supplements apply to a declared boundary.
2. The five Q-Risk pillars. Governance and accountability; crypto visibility and QASI completeness; data longevity and exposure management; PQC migration readiness and crypto agility; third-party readiness.
3. Scoring and gates. How pillar scores combine, the G60, G70 and G80 gates, why a self-assessment cannot exceed 70 until suppliers attest, and where the Defensible band begins.
4. Evidence. What counts as sufficient evidence for each clause, sampling a cryptographic inventory against the real population, and recording what was not evidenced.
5. Independence and conflicts. The QCI independence policy, the 12-month rule, self-review threats, and when an assessor must decline.
6. Writing the determination. Structure of a signed determination under QCI-P1, stating the boundary, limitations and findings without claiming certification or compliance.

Complaints and appeals

Anyone can complain about a licensed assessor's conduct or determination. Applicants and license holders can appeal a licensing decision. Both go by email to info@quantumcoreinstitute.com.

Complaints about a licensed assessor

Send the assessor's name or license number, the engagement concerned and what went wrong.
QCI acknowledges the complaint within 5 business days and tells the assessor, unless doing so would harm the person complaining.
The assessor has 15 business days to respond in writing.
A reviewer with no part in the engagement reviews the record and both accounts, and issues a written outcome within 30 business days of acknowledgment.
Outcomes are: no action; a required correction; conditions on the license; suspension; or withdrawal. A suspended or withdrawn license is removed from the public register.

QCI does not change an assessor's determination. If a determination is found unsound, the assessor must correct or withdraw it.

Appeals against a licensing decision

Appeal within 30 days of the decision, stating which decision you are appealing and why.
QCI acknowledges the appeal within 5 business days.
The appeal is reviewed by someone who took no part in the original decision. You may submit further evidence.
A written decision follows within 30 business days of acknowledgment. The appeal decision is final.

Decisions that can be appealed: declining an application, an exam or supervised-assessment result, refusing renewal, and conditions, suspension or withdrawal after a complaint. A license stays in force while an appeal against conditions is heard, but not while an appeal against suspension or withdrawal is heard.

Public register

Current licenses only. A license that has lapsed or not been renewed is removed from this list. Open the full register.

Loading register…

Licensed assessors and applicants: sign in to the assessor portal to see your license, renewal dates and assignments, and to declare conflicts before each assessment.

Apply for a license

Applications start at step 01. QCI will contact you by email about the written exam if your application meets the criteria.