Think Earlier.

    Governance takes longer to build than cryptography takes to break.

    Quantum Risk Governance Services

    Six engagements and a monthly retainer under the published QCI-QS1 standard. Each one is described by what you get, then the documents you receive.

    What you get

    Get a score you can defend to an auditor, from someone who did not build the work.

    Documents you receive

    Written determination and independently assessed Q-Risk Score

    Clause coverage

    QCI-QS1 Clauses 1 to 8, QCI-P1

    Independent Assessment

    QCI-QS1 Clauses 1 to 8: a written determination on a declared boundary

    $24,500 · 60 days

    An independent assessment of your conformance record and Q-Risk Score where QCI has no firm-level self-review conflict. QCI does not assess a boundary it helped build or operate; a separate QCI assessor alone does not resolve that conflict. An eligible review produces the written determination required for a reported score and the independent review required for level 5 in any pillar. See the assessment independence policy for the 12-month minimum cooling-off rule and exclusions. An independent assessment is not QCI certification.

    Clause coverage

    QCI-QS1 Clauses 1 to 8 · QCI-P1

    Duration

    60 days

    Engagement Scope

    Declared assessment boundary

    Delivery

    Scoped with your organization

    Format

    Independent evidence review

    Engagement Scope

    • Declared boundary and assessment-type letter
    • Conformance record and evidence review
    • Written determination

    Deliverables

    • Assessment-type letter and declared boundary
    • Conformance record review across every requirement in Clauses 1 to 8
    • Evidence sampling, including all unresolved high-impact exceptions
    • Gate determinations for G60, G70 and G80
    • Independently assessed Q-Risk Score with band and conformance status reported side by side
    • Findings register with owners and due dates
    • Dated written determination

    Ideal For

    • Organizations that self-assessed and need a number a regulator, insurer or counterparty can rely on
    • DORA and NIS2 entities preparing for supervisory examination
    • Any pillar at level 5
    Scope an assessmentRead the independence policyRead QCI-P1

    Where do I start?

    Find the line that sounds like your situation.

    1. 01 · FreeFree standard"You want to know what good looks like."Go
    2. 02 · FreeFree screening"You want a rough idea of where you stand."Go
    3. 03 · $5,500Crisis Simulation"Your auditor asked a quantum question."Go
    4. 04 · $69,000Readiness Program"You have no documented baseline yet."Go
    5. 05 · $24,500Independent Assessment"You need a number you can defend."Go

      Independent assessment by an assessor outside QCI for QCI-built work (see Independence policy).

    6. 06 · $8,500 / monthRetainer"You need the record kept current each quarter."Go

    This is not a required sequence. Start at any step that fits.