Think Earlier.

    The quantum problem starts before the quantum computer arrives.

    PQC migration cost drivers

    A free planning worksheet for CFOs, CIOs and risk leaders. Answer nine questions about your organization and see which factors will drive the effort of moving to post-quantum cryptography, what you can't size yet, what is already late, and where to start.

    It does not produce a dollar figure. Cost depends on evidence this page can't see, and QCI publishes cost ranges only once they are calibrated against completed engagements. Each rating follows the rule shown with it.

    See a sample worksheet (PDF) : synthetic answers for a vendor-heavy organization.

    Nine questions

    Rough answers are fine. Choose "Don't know" where you don't; the worksheet tells you how to find out.

    1. Critical systems in scope
    2. Critical suppliers
    3. Who controls most of your cryptography
    4. Certificates and keys in use
    5. Longest period some data must stay confidential
    6. Hard-coded or legacy cryptography
    7. Cryptographic inventory
    8. People who can work on migration
    9. Crypto-agility test (swap an algorithm end to end)
    0 of 9 answered

    How the worksheet rates each driver

    Seven factors account for most of the difference in effort between organizations. Each is rated High, Medium or Low from your answers. Data retention sets timing, not size: it tells you what is already late.

    Supplier dependency
    How much of your cryptography sits in vendor products, and how many critical suppliers you rely on.
    Number of systems
    How many critical systems need their cryptography found, changed and tested.
    Certificate and key volume
    How many certificates and keys must be reissued.
    Hard-coded and legacy cryptography
    Whether algorithms are fixed in code and have to be rewritten.
    Inventory gap
    Whether a validated cryptographic inventory exists to plan from.
    Team capacity
    Whether named people own the work across years.
    Untested crypto agility
    Whether one algorithm swap has been tested end to end.

    Want a number your board can rely on? It starts with evidence: a Supplier Readiness Pilot for vendor-held cryptography, or the Readiness Program for your own systems. Background reading: what a migration roadmap contains.