Open-Access Framework & Methodology

The Applied Quantum
PQC Migration Framework

A practitioner-grounded, 8-phase lifecycle for planning and executing enterprise-wide post-quantum cryptography migration — from executive mandate through sustained crypto-agility. Version 1.1, March 2026.

 

The Applied Quantum PQC Migration Framework — Universal
Universal Framework

PQC Migration Framework
& Methodology

The complete 8-phase lifecycle — from executive mandate and cryptographic discovery through CBOM documentation, risk-prioritized roadmaps, hybrid pilots, infrastructure modernization, and vendor governance. Includes maturity model, metrics, crypto-agility architecture, regulatory mapping, and team structure guidance applicable to any sector.

v1.1  ·  March 2026  ·  Marin Ivezic / Applied Quantum  ·  CC BY 4.0

Download PDF

 

Sector Extensions

 

Financial Services Extension

Financial Services

Phase-by-phase adaptations for payments, banking, and capital markets — addressing HNDL urgency on cross-border flows, HSM migration constraints, PCI DSS v4.0 requirements, and the cryptographic complexity of interbank payment systems.


Download PDF

 

 

Telecommunications Extension

Telecommunications

Sector-specific guidance for mobile operators, fixed-line carriers, and converged network providers — covering 5G-AKA, roaming interfaces, GSMA PQ.01–PQ.07 alignment, lawful intercept, vendor concentration, and 3GPP standards dependencies.


Download PDF

 

 

OT and Critical National Infrastructure Extension

OT & Critical Infrastructure

Adaptations for energy, utilities, water, transportation, and industrial organizations — addressing 15–25 year equipment lifecycles, safety-case recertification, ICS/SCADA constraints, TNFL risks to firmware integrity, and gateway-based PQC deployment strategies.


Download PDF

 

 

Government and Defense Extension

Government & Defense

Framework adaptations for federal agencies, defense departments, intelligence organizations, and defense industrial base contractors — covering CNSA 2.0 milestones, NSM-10 compliance, classification constraints, FedRAMP/FIPS requirements, and allied interoperability.


Download PDF