For your role

    Procurement and vendor management

    Practical guidance for the decision, evidence and service this role owns.

    The question

    “Have our critical suppliers told us their post-quantum plans?”

    Send a consistent evidence request, apply the 60-day response clock, assess adequacy and assign every missing or weak response to an exception owner.

    Why it is urgent for this role

    A migration plan can stall on products, platforms and service providers outside your control. QCI-QS1 gate G70 therefore requires attestations covering critical suppliers before a score can move beyond 70.

    Start with one free document

    Annex C, vendor roadmap request pack. No form.

    The service that fits

    Supplier Attestation Round. We send the requests, run the 60-day clock and score responses.

    Sample deliverable

    Illustrative vendor oversight report showing the information structure a client would receive
    Vendor oversight report. Attestation status by supplier, adequacy scoring and the exception register. This illustration shows the format only; it is not client evidence.

    What if a supplier does not respond?

    The absence is recorded, escalated and assigned to an exception owner. It is not treated as evidence of readiness.

    Book a scoping conversationTry the free screening