For security and technology leaders
Post-Quantum Readiness for Leaders
Post-quantum migration requires leadership decisions about scope, priorities, funding, and accountability. This independent course uses a synthetic inventory, exception request, and board case to practice those decisions under uncertainty. It distinguishes published standards from drafts and specific obligations from general planning signals; no cryptography prerequisite or product account is required.
Who this course is for: CISOs, CIOs, CTOs, VPs and directors, engineering leaders, security leaders, and enterprise architects who decide how and when their organization migrates to post-quantum cryptography.
Estimated breakdown: 36 min reading, 30 min optional written practice, and 12 min for the final assessment. These are author estimates, not timed requirements.
Your progress
Checking your progress in this browser…
The core question
"What should my organization be doing about post-quantum risk now?"
Outcomes
What you can do when you finish.
- Explain the business case for post-quantum migration without invoking cryptographic mathematics.
- Distinguish final standards from draft guidance and check which contractual or program deadlines apply.
- Sequence a migration using secrecy, exposure, impact, evidence, and dependencies rather than algorithm counts alone.
- Assign ownership, funding, and time-bound exceptions that keep a migration program accountable.
- Ask your own engineering and security teams questions that surface whether migration and monitoring are actually working.
Topics
What the course covers.
Course outline
Modules and lessons.
Module 1
The decision
The business case for acting now, and the difference between what is settled and what is still being drafted.
- The leadership decision6 min read5 min 36 sec
Post-quantum migration is a funding, sequencing, and accountability decision — this course teaches the decision, not the mathematics behind it.
- The cost of waiting6 min read6 min 28 sec
Data captured today can be decrypted later — the timeline is unknown, which is exactly why waiting for certainty is the expensive choice.
Module 2
The program
Why inventory comes before prioritization, how to sequence a migration you cannot do all at once, and why the goal is agility, not a single swap.
- The inventory6 min read6 min 21 sec
You cannot prioritize, fund, or migrate what you cannot see — a credible inventory is the first deliverable of any program, not a side task.
- Prioritizing migration6 min read5 min 22 sec
A migration budget is finite and the inventory is long — prioritize by data lifetime, exposure, and harvestability, not by algorithm counts.
Module 3
The governance
Who owns this, who funds it, and how a leader confirms migrated systems stay migrated.
- Ownership and funding6 min read5 min 22 sec
A migration program without a named owner and a budget line is a set of good intentions — this is how leaders make it real.
- Questions to ask your teams6 min read5 min 17 sec
Migrating once is not the same as staying migrated — how to validate a claim, monitor for drift, and the specific questions worth asking your own teams.
Credential
PQC for Leaders — Certificate of Completion
Awarded after the final assessment, which is graded server-side so the score cannot be a number the browser chose.
Every issued credential can be checked at RelixQ Academy credential verification.
Final assessment
12 questions · 80% to pass
Scenario-based, timed only by your own pace. Retake it as many times as you need.