Post-quantum migration roadmap
Discover → Assess → Prioritize → Migrate → Verify → Monitor
01
Discover
02
Assess
03
Prioritize
04
Migrate
05
Verify
06
Monitor
Discover
Full cryptographic inventory across cloud, on-prem and code
PQC action: Deploy agents + CT log + SBOM ingestion
Affected assets
4,308
Owner · timeline
M. Okafor
Jan → Mar
Assess
Classify data by confidentiality lifetime (Mosca's theorem)
PQC action: Tag systems where shelf-life + migration > threat horizon
Affected assets
1,120
Owner · timeline
L. Chen
Mar → May
Prioritize
Rank HNDL exposure for payments & archive systems
PQC action: Risk-weighted backlog, executive sign-off
Affected assets
214
Owner · timeline
R. Alvarez
May → Jul
Migrate
Hybrid PQ TLS (X25519MLKEM768) on all external endpoints
PQC action: Upgrade edge + LB to OpenSSL 3.5 / BoringSSL
Affected assets
386
Owner · timeline
Platform Eng
Jul → Oct
Re-wrap archived data keys with ML-KEM-768
PQC action: KMS hybrid wrap; re-encrypt 7-yr retention buckets
Affected assets
62
Owner · timeline
Data Platform
Sep → Dec
VPN IKEv2 RFC 9370 hybrid key exchange
PQC action: Firmware upgrade, staged rollout per region
Affected assets
18
Owner · timeline
NetOps
Oct → Jan
Verify
Independent validation of PQ handshakes and fallbacks
PQC action: Continuous TLS probing + red team downgrade tests
Affected assets
386
Owner · timeline
Security
Nov → Feb
Monitor
Continuous drift detection for new classical crypto
PQC action: CI policy gates + daily rescans
Affected assets
4,308
Owner · timeline
Security
Dec → Ongoing