For your role
CISOs and quantum risk owners
Practical guidance for the decision, evidence and service this role owns.
The question
“Where is our vulnerable cryptography, and what is the plan to replace it?”
Start with a bounded inventory of systems, keys, certificates, data flows and suppliers, then connect every material exposure to an owner and migration decision.
Why it is urgent for this role
Cryptography is spread across infrastructure, applications, machine identities and third parties. An algorithm list alone cannot show what depends on each implementation or whether evidence covers the critical boundary.
Start with one free document
Practitioner Handbook, chapter 2. No form.
The service that fits
Readiness Program. An inventory and baseline built with QCI in 90 days.
Sample deliverable

Can an existing asset inventory be reused?
Usually. QCI-QS1 adds cryptographic fields, evidence references and dependency relationships rather than requiring a second inventory without cause.