This page maps the hub resources to public standards and guidance used to structure the templates. The hub is vendor-neutral and should be tailored to local policy, sector obligations, and operational risk.
Reference map
| Reference | URL | How it is used in the hub |
|---|---|---|
| NIST FIPS 203 — Module-Lattice-Based Key-Encapsulation Mechanism Standard (ML-KEM) | https://csrc.nist.gov/pubs/fips/203/final | Standards and planning |
| NIST FIPS 204 — Module-Lattice-Based Digital Signature Standard (ML-DSA) | https://csrc.nist.gov/pubs/fips/204/final | Standards and planning |
| NIST FIPS 205 — Stateless Hash-Based Digital Signature Standard (SLH-DSA) | https://csrc.nist.gov/pubs/fips/205/final | Standards and planning |
| NIST PQC Standardization Project | https://csrc.nist.gov/projects/post-quantum-cryptography/post-quantum-cryptography-standardization | Standards and planning |
| NIST NCCoE Migration to Post-Quantum Cryptography | https://www.nccoe.nist.gov/applied-cryptography/migration-to-pqc | Risk management and operations |
| NIST CSWP 39 — Considerations for Achieving Crypto Agility | https://nvlpubs.nist.gov/nistpubs/CSWP/NIST.CSWP.39.pdf | Risk management and operations |
| NIST Cybersecurity Framework 2.0 announcement and resources | https://www.nist.gov/news-events/news/2024/02/nist-releases-version-20-landmark-cybersecurity-framework | Risk management and operations |
| NIST SP 800-53 Rev. 5 — Security and Privacy Controls | https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final | Risk management and operations |
| NIST SP 800-82 Rev. 3 — Guide to Operational Technology Security | https://csrc.nist.gov/pubs/sp/800/82/r3/final | Risk management and operations |
| NIST SP 800-161 Rev. 1 Update 1 — Cybersecurity Supply Chain Risk Management | https://csrc.nist.gov/pubs/sp/800/161/r1/upd1/final | Risk management and operations |
| CISA — Quantum-Readiness: Migration to Post-Quantum Cryptography | https://www.cisa.gov/resources-tools/resources/quantum-readiness-migration-post-quantum-cryptography | Risk management and operations |
| CISA — Post-Quantum Considerations for Operational Technology | https://www.cisa.gov/resources-tools/resources/post-quantum-considerations-operational-technology | Risk management and operations |
| CISA — Product Categories for Technologies that Use PQC Standards | https://www.cisa.gov/resources-tools/resources/product-categories-technologies-use-post-quantum-cryptography-standards | Standards and planning |
Mapping by hub artifact
| Artifact | Primary alignment |
|---|---|
| Crypto Inventory Template | NCCoE Migration to PQC, NIST CSWP 39, NIST FIPS 203/204/205, CISA quantum-readiness roadmap. |
| PQC Readiness Checklist | NIST CSF 2.0, NIST CSWP 39, NIST SP 800-53, NIST SP 800-161, NIST NCCoE PQC migration project. |
| Cloud/IAM Migration Playbook | NIST FIPS 203/204/205, NIST CSWP 39, NIST SP 800-53, NIST SP 800-161, CISA PQC product category guidance. |
| SCADA/ICS PQC Checklist | NIST SP 800-82 Rev. 3, NIST CSWP 39, NIST SP 800-161, CISA OT PQC considerations. |
Reference sources
This resource hub is an independent, vendor-neutral planning aid. It is not a NIST, CISA, or government publication and does not imply endorsement by any public agency.