Think Earlier.

    The quantum problem starts before the quantum computer arrives.

    QCI-QS1 v2.3 · QCI-P1

    Get independently assessed

    “A self-assessment is the organization’s own determination against the standard. An independent assessment is one where a competent reviewer who did not design, implement or operate the controls has examined the conformance record and the evidence and issued a written statement. Both are legitimate. The rule exists so that the two are never confused.”

    QCI-P1, Independent Assessment Overview, p. 2

    “Level 5 in any pillar shall require independent review of that pillar within the previous 12 months and after material changes that invalidate the review.” QCI-QS1 v2.3

    QCI performs independent assessment against QCI-QS1 only where QCI has not built or operated the work under review and the client passes a documented conflict check. A different QCI assessor does not cure a firm-level self-review conflict. Eligible reviews examine the boundary, evidence behind each pillar, and the G60, G70 and G80 gates before a written determination. An independent assessment is not QCI certification.

    If QCI supported your Readiness or implementation work, please read our independence policy before requesting a review. At least 12 months must have passed since the last such engagement, and QCI still cannot assess its own work after that period. An unaffiliated assessor is needed when the proposed boundary includes QCI-supported controls.

    Read QCI-P1

    Two routes to an independent assessment

    Which one fits depends on a single question: has QCI advised on, built or operated any controls inside the boundary you want assessed?

    No: QCI can assess it

    QCI Independent Assessment · $24,500 · 60 days

    For organizations QCI has never advised on that boundary, after a documented conflict check. Use the form below.

    Yes: an outside assessor

    Licensed outside assessor

    No licenses have been issued yet, so any unaffiliated, qualified assessor may perform the review. QCI can supply records but does not direct findings or sign the determination.

    Public register of licensed assessors

    Scope an assessment

    Tell us the boundary you have in mind. We will check eligibility under the independence policy before accepting any assessment. This request is not an assessment or a booking.

    Has QCI advised on, built or operated controls in this boundary? *
    Estimated critical systems and suppliers *
    Does a self-assessment already exist? *