[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fbOz5WoYyTvnygK_H51O9dm3_XVw1T2Kg81NzewNWjrA":3},{"article":4,"iocs":47,"watch_terms":48,"solutions":49,"lesson":124},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":26,"category":27,"article_tags":31},"a9f1efee-d2e7-4722-81cd-f41727df0b58","What the post-quantum executive order really demands of CISOs","what-the-post-quantum-executive-order-really-demands-of-cisos-ea53ee","ith federal PQC deadlines set for 2030 and 2031, CISOs face a multi-year transformation program that most organizations have not yet started. The window for orderly execution is narrowing fast. The post What the post-quantum executive order really demands of CISOs appeared first on CyberScoop.","A new executive order codifies post-quantum cryptography (PQC) requirements with hard deadlines: federal high-value systems must transition key establishment by December 31, 2030, and digital signatures by December 31, 2031. CISOs must shift from awareness to ownership, establishing cross-functional governance structures and cryptographic inventories to manage the transformation, as adversaries are already conducting \"Harvest Now, Decrypt Later\" attacks to steal encrypted data for future decryption.","Post-quantum cryptography executive order sets 2030-2031 federal deadlines, demanding immediate CISO action.","https:\u002F\u002Fcyberscoop.com\u002Fpost-quantum-cryptography-readiness-ciso-deadlines-op-ed\u002F","https:\u002F\u002Fcyberscoop.com\u002Fwp-content\u002Fuploads\u002Fsites\u002F3\u002F2026\u002F06\u002FGettyImages-2282288446-1-1.jpg","2026-06-29T09:00:00+00:00","2026-06-29T10:00:11.547643+00:00",7,[17,20,23],{"name":18,"type":19},"Post-Quantum Cryptography (PQC)","technology",{"name":21,"type":22},"Google","vendor",{"name":24,"type":25},"Harvest Now, Decrypt Later","campaign","0493c7e9-989a-4692-b4e6-136f5ec09675",{"id":26,"icon":28,"name":29,"slug":30},null,"Cryptography","cryptography",[32,37,42],{"category":33},{"id":34,"icon":28,"name":35,"slug":36},"217d3263-c763-41ca-875e-06901f522fe0","NIST","nist",{"category":38},{"id":39,"icon":28,"name":40,"slug":41},"53f9c4b6-8bc6-4964-9169-d09e5cd41d72","Compliance","compliance",{"category":43},{"id":44,"icon":28,"name":45,"slug":46},"c5c77cdb-f7d7-4990-9436-c81dcbff1163","Policy","policy",[],[21],{"controls":50,"vendors":123},[51,80,106],{"slug":52,"name":53,"problem":54,"products":55},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[56,64,72],{"vendor_slug":57,"vendor_name":58,"vendor_logo":59,"product_slug":60,"product_name":61,"url":62,"description":63},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":65,"vendor_name":66,"vendor_logo":67,"product_slug":68,"product_name":69,"url":70,"description":71},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":73,"vendor_name":74,"vendor_logo":75,"product_slug":76,"product_name":77,"url":78,"description":79},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"slug":81,"name":82,"problem":83,"products":84},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",[85,93,101],{"vendor_slug":86,"vendor_name":87,"vendor_logo":88,"product_slug":89,"product_name":90,"url":91,"description":92},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png","vault","HashiCorp Vault","https:\u002F\u002Fwww.hashicorp.com\u002Fen\u002Fproducts\u002Fvault","Secrets management with short-lived credentials and encryption as a service.",{"vendor_slug":94,"vendor_name":95,"vendor_logo":96,"product_slug":97,"product_name":98,"url":99,"description":100},"thales","Thales","\u002Fvendor-logos\u002Fthales.png","luna-hsm","Thales Luna HSM","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fhardware-security-modules","Hardware security modules for protecting cryptographic keys.",{"vendor_slug":94,"vendor_name":95,"vendor_logo":96,"product_slug":102,"product_name":103,"url":104,"description":105},"ciphertrust","CipherTrust Data Security Platform","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fdata-security-platform","Data discovery, encryption and central key management across on-premises and cloud.",{"slug":107,"name":108,"problem":109,"products":110},"compliance-automation","Compliance automation (GRC)","Evidence for NIS2, DORA and ISO 27001 is collected continuously, not in a rush before the audit.",[111,117],{"vendor_slug":112,"vendor_name":113,"vendor_logo":114,"product_slug":112,"product_name":113,"url":115,"description":116},"drata","Drata","\u002Fvendor-logos\u002Fdrata.png","https:\u002F\u002Fdrata.com\u002F","Continuous control monitoring and audit readiness across security frameworks.",{"vendor_slug":118,"vendor_name":119,"vendor_logo":120,"product_slug":118,"product_name":119,"url":121,"description":122},"vanta","Vanta","\u002Fvendor-logos\u002Fvanta.png","https:\u002F\u002Fwww.vanta.com\u002F","Automated evidence collection and continuous monitoring for ISO 27001, SOC 2, NIS2 and other frameworks.",[],{"slug":125,"title":126,"body":127,"framework_refs":128,"framework_notes":140},"post-quantum-cryptography-mandates-force-cisos-to-act-now","Post-Quantum Cryptography Mandates Force CISOs to Act Now","A new executive order sets hard deadlines requiring federal high-value systems to complete post-quantum cryptography transitions by 2030–2031, elevating PQC from a theoretical concern to an urgent compliance obligation. The core risk is the 'Harvest Now, Decrypt Later' threat, where adversaries are already capturing encrypted data today with the intent to decrypt it once quantum computing capabilities mature — meaning data stolen now is already at risk. CISOs can no longer treat PQC as a future problem; without a cryptographic inventory and governance structure, organizations have no visibility into which assets are vulnerable. The combination of long migration timelines, legacy system complexity, and active adversarial collection makes delayed action strategically dangerous and potentially irreversible.",[129,130,131,132,133,134,135,136,137,138,139],"NIST SP 800-208 (PQC Migration)","NIST FIPS 203 (ML-KEM)","NIST FIPS 204 (ML-DSA)","NIST CSF 2.0 - Govern (GV.OC)","NIST SP 800-53 SC-12 (Cryptographic Key Establishment)","NIST SP 800-53 SC-13 (Cryptographic Protection)","CIS Control 3 (Data Protection)","CIS Control 16 (Application Software Security)","NSM-10 (National Security Memorandum on PQC)","GDPR Article 32 (Security of Processing)","ITIL Service Transition – Change Management",{}]