Think Earlier.

    Governance takes longer to build than cryptography takes to break.

    Quantum Risk Governance Services

    Six engagements and a monthly retainer under the published QCI-QS1 standard. Each one is described by what you get, then the documents you receive.

    What you get

    Get every critical supplier's post-quantum position confirmed in writing, so your score can pass 70.

    Documents you receive

    Supplier requests, scored responses, officer-signed attestations and the exception register

    Clause coverage

    QCI-QS1 Clause 7, gate G70

    Supplier Attestation Round

    QCI-QS1 Clause 7: clearing gate G70

    $6,500 + $450 per critical supplier · 90 days (60-day response window plus scoring and escalation)

    Under QCI-QS1 v2.3 no score can exceed 70 until every critical supplier has provided an adequate response and an officer-signed attestation. A documented exception does not count toward it. QCI runs the round: Annex C requests on your letterhead citing your sector obligation, the 60-day deadline, responses scored for adequacy, attestations collected on the authorized form, non-responses entered on the exception register with escalation, and coordinated requests through sector ISACs or Member State channels where a supplier serves many customers.

    Clause coverage

    QCI-QS1 Clause 7 · G70

    Duration

    90 days (60-day response window plus scoring and escalation)

    Engagement Scope

    Critical supplier estate

    Delivery

    Scoped with your organization

    Format

    Supplier evidence round

    Engagement Scope

    • We list your critical suppliers and send each one a request on your letterhead
    • Suppliers get 60 days to respond; we chase the ones that stall
    • We score every response and tell you whether your score can pass 70

    Deliverables

    • Critical supplier register
    • Issued requests with dates
    • Scored responses
    • Officer-signed attestations
    • Exception register entries with escalation letters
    • Contract-clause recommendations for the next renewal
    • The G70 determination

    Ideal For

    • Any organization capped at 70
    • Operators of SCADA, DCS or medical devices
    • Carriers with reinsurers on critical flows
    • Wallet providers on native keystores
    Scope the roundRead the supplement for your sector

    Where do I start?

    Find the line that sounds like your situation.

    1. 01 · FreeFree standard"You want to know what good looks like."Go
    2. 02 · FreeFree screening"You want a rough idea of where you stand."Go
    3. 03 · $5,500Crisis Simulation"Your auditor asked a quantum question."Go
    4. 04 · $69,000Readiness Program"You have no documented baseline yet."Go
    5. 05 · $24,500Independent Assessment"You need a number you can defend."Go

      Independent assessment by an assessor outside QCI for QCI-built work (see Independence policy).

    6. 06 · $8,500 / monthRetainer"You need the record kept current each quarter."Go

    This is not a required sequence. Start at any step that fits.