OMB-23-02-Compliance
Your Agency Must Migrate to Post-Quantum Cryptography
Take the First Step to Meet Compliance Deadlines and Protect Sensitive Data
Agency-appointed migration leads are entrusted to take immediate action to protect their agencies against the risks of a post-quantum world. Not knowing what cryptographic libraries are in use could have you in active risk. OMB memo M-23-02 issues clear guidance with an actionable timeline for migration leads to follow in order to rapidly understand and demonstrate the status of all of the cryptographic libraries and prepare for a post-quantum world. The direction provided by M-23-02 puts into action the guidance of NSM-10 and also aligns with the zero trust strategy put forth by EO 14028.
Take Action Now
Discover. Remediate. Control.
Agencies with any data/assets of value need to exercise due diligence towards fully understanding and mitigating risks to vulnerable systems. In the immediate term, we can help you meet your cryptographic inventory requirements with very little lift and disruption. We also help you meet ongoing requirements as your agency matures its post-quantum cryptography (PQC) by providing a PQC strategy, execution plan, and continuous reporting to meet annual reporting requirements.
Resources
Keys in the Wild: The Unseen Vulnerability of Cryptographic Objects
In the intricate web of cloud, on-premises, and hybrid environments cryptographic keys remain high-value targets for the exploitation of our most sensitive data and systems.
