SecureAzCloud Public PQC Artifact

Crypto-Agility Assessment Template

Implementation-focused PDF/XLSX template with crypto asset inventory fields, risk scoring, migration priority, long-lived data flagging, supplier readiness, and evidence links.

Version v1.0 | Updated 2026-06-07 | Vendor-neutral | NIST-aligned | Public/redacted planning aid

← Back to SecureAzCloud PQC Migration Resource Hub

This public version is intentionally redacted and uses examples/placeholders only. It does not include secrets, hostnames, IP addresses, customer data, internal diagrams, proprietary product configurations, or key material.

Downloads

XLSX Assessment Template

Workbook with inventory dropdowns, formulas, risk scoring, roadmap, vendor questions, and source map.

Download

PDF Companion

Printable companion explaining field model, scoring logic, sample redacted entries, and evidence expectations.

Download

CSV Import Template

Lightweight CSV for importing crypto inventory fields into GRC or asset-management systems.

Download

What this artifact covers

AreaCoverageExpected Evidence
Crypto inventoryAsset, data, exposure, business criticality, crypto function, algorithm, certificate/key store, vendor, library, firmware dependency.Discovery export, certificate scan, library report, architecture evidence.
Risk scoringLong-lived data, exposure, criticality, quantum vulnerability, supplier readiness, and migration effort scoring.Scoring review, P1/P2/P3 backlog, risk acceptance record.
Migration planningFive-phase roadmap, target quarter, owners, supplier questions, and evidence links.Roadmap, change records, vendor responses, pilot evidence.

Recommended use

  1. Download the XLSX and complete the Crypto_Inventory sheet for priority assets.
  2. Review the calculated risk score and P1/P2/P3 priority.
  3. Use the Assessment_Checklist and Vendor_Questions sheets to collect evidence and identify blockers.
  4. Convert P1/P2 items into a migration roadmap and pilot plan.
  5. Publish only redacted output externally; keep sensitive architecture evidence internal.

Standards and source alignment

Aligned to NIST's PQC standards, NIST NCCoE cryptographic discovery/inventory workstream, and NIST crypto-agility guidance.

Core references include NIST FIPS 203, NIST FIPS 204, NIST FIPS 205, NIST NCCoE Migration to PQC, NIST CSWP 39 crypto-agility guidance, CISA quantum-readiness resources, and CISA's 2026 product-category announcement for PQC adoption.

Disclaimer

This artifact is an independent planning aid. It is not a government publication and does not imply endorsement by NIST, CISA, or any public agency. Organizations should adapt it to their own architecture, operating constraints, regulatory obligations, and vendor support status.