Quantum Readiness Assessment Tool

Cryptographic Inventory & Awareness

1. Has your organization conducted a comprehensive inventory of all systems using cryptography?

No, we have not conducted any cryptographic inventory

We have a partial inventory of our most critical systems

Yes, we have a complete inventory of all systems using cryptography

2. Are you aware of which specific cryptographic algorithms are used across your organization?

No, we don't track specific algorithms

We know some but not all algorithms in use

Yes, we maintain detailed records of all cryptographic algorithms in use

Risk Assessment & Planning

3. Has your organization assessed the potential impact of quantum computing on your security infrastructure?

No, we have not considered quantum computing threats

We have had informal discussions but no formal assessment

Yes, we have conducted a formal assessment of quantum computing risks

4. Does your organization have a quantum readiness strategy or roadmap?

No, we don't have a strategy

We have preliminary plans but no formal roadmap

Yes, we have a comprehensive quantum readiness roadmap

Implementation & Technical Readiness

5. Has your organization begun testing or implementing post-quantum cryptography (PQC)?

No, we have not started any PQC implementation

We have begun testing PQC in isolated environments

Yes, we have implemented PQC in production systems

6. Are your cryptographic implementations designed to be crypto-agile (easily updatable)?

No, our implementations would be difficult to update

Some systems are crypto-agile, others are not

Yes, we have designed our systems to be crypto-agile

Organizational Readiness

7. Has your security team received training on quantum computing threats and post-quantum cryptography?

No, our team has not received any training

Some team members have basic awareness

Yes, our team has received comprehensive training

8. Is quantum security included in your organization's security budget planning?

No, we have no budget allocated for quantum security

We have limited budget for initial assessment

Yes, we have dedicated budget for quantum security initiatives

Data Protection & Compliance

9. Have you identified data with long-term confidentiality requirements (10+ years)?

No, we haven't assessed data lifespan requirements

We have partially identified long-term data

Yes, we have comprehensively identified all long-term data

10. Are you monitoring regulatory developments related to post-quantum cryptography?

No, we are not monitoring regulatory developments

We occasionally check for major announcements

Yes, we actively monitor all relevant regulatory developments