7 Topics
5 Days
37 Sessions
Programme Overview
Training Description
Who Should Attend
This course is ideal for;
- Cybersecurity Professionals & Analysts
- IT Auditors & Internal Auditors
- Cryptographers & Security Architects
- Risk Managers & Compliance Officers
- Chief Information Security Officers (CISOs)
- Data Protection Officers (DPOs)
- Network Security Engineers
- Researchers in Quantum Security
Session Objectives
- Master the fundamental concepts of quantum mechanics relevant to quantum computing and its security implications.
- Learn sophisticated techniques for understanding how quantum algorithms (e.g., Shor's, Grover's) threaten current cryptographic standards.
- Develop proficiency in identifying and inventorying cryptographic assets vulnerable to quantum attacks within an organization.
- Understand advanced strategies for assessing an organization's current "quantum readiness" and cryptographic exposure.
- Explore best practices in post-quantum cryptography (PQC) and the NIST standardization process.
- Grasp advanced techniques for evaluating and implementing quantum-resistant algorithms (e.g., lattice-based, hash-based).
- Learn about robust approaches to auditing the deployment and configuration of post-quantum cryptographic solutions.
- Identify the critical role of cryptographic agility and hybrid approaches in the transition to a quantum-safe future.
- Develop skills in formulating a comprehensive quantum resilience strategy and roadmap for an enterprise.
- Understand the importance of continuous monitoring and threat intelligence in the evolving quantum landscape.
- Formulate strategies for effective communication of quantum risks and audit findings to senior management and the board.
About the Course
As the era of quantum computing rapidly approaches, it brings with it unprecedented computational power that threatens to render current cybersecurity paradigms, particularly widely used cryptographic algorithms, utterly obsolete, posing an existential risk to global data security and critical infrastructure. Mastering Quantum Computing Security Auditing is absolutely vital for cybersecurity professionals, IT auditors, risk managers, and compliance officers who must prepare for "Q-Day" – the point at which quantum computers can effectively break classical encryption, necessitating a proactive shift to post-quantum cryptography (PQC) and new security verification methodologies. This essential training course is designed to equip information security experts, cryptographers, internal audit teams, and technology strategists with the specialized knowledge and practical skills required for understanding the fundamentals of quantum mechanics and its implications for cryptography, identifying cryptographic assets vulnerable to quantum attacks, assessing current encryption infrastructure for quantum readiness, evaluating and implementing NIST-approved post-quantum cryptographic algorithms, developing audit methodologies for quantum-safe systems, and formulating robust quantum resilience strategies across an enterprise's digital assets. Participants will gain a comprehensive understanding of Shor's and Grover's algorithms and their impact, the nuances of migrating to hybrid and PQC solutions, the challenges of "harvest now, decrypt later" attacks, and the critical role of the audit function in ensuring an organization's preparedness for the quantum future, safeguarding long-term data confidentiality and integrity. This program emphasizes a forward-looking, risk-based approach, adherence to emerging standards, and real-world scenarios pertinent to securing digital environments in the quantum era.
Curriculum & Topics
7 Topics | 37 Sessions
-
Workshop 1.1:
Introduction to quantum mechanics: superposition, entanglement, qubits
-
Workshop 1.2:
Overview of quantum computing models and hardware
-
Workshop 1.3:
How Shor's algorithm breaks asymmetric encryption (RSA, ECC)
-
Workshop 1.4:
How Grover's algorithm impacts symmetric encryption (AES) and hash functions
-
Workshop 1.5:
The "harvest now, decrypt later" threat and its urgency
-
Workshop 1.6:
Current state and projected timeline for quantum computer development
-
Workshop 2.1:
Module on Cryptographic Inventory: Identifying all cryptographic assets, algorithms, and key sizes in use.
-
Workshop 2.2:
Tools and methodologies for discovering cryptographic usage across systems.
-
Workshop 2.3:
Mapping sensitive data to the cryptographic protection it currently employs.
-
Workshop 2.4:
Risk assessment: Prioritizing assets based on sensitivity and exposure to quantum threats.
-
Workshop 2.5:
Understanding cryptographic agility and its importance for future transitions.
-
Workshop 3.1:
Introduction to post-quantum cryptography (PQC) concepts
-
Workshop 3.2:
Overview of the NIST PQC standardization process and selected algorithms
-
Workshop 3.3:
Module on Lattice-Based Cryptography: Principles, security assumptions, and common algorithms (e.g., Kyber, Dilithium).
-
Workshop 3.4:
Module on Hash-Based Cryptography: Merkle trees and Lamport signatures.
-
Workshop 3.5:
Module on Code-Based Cryptography: McEliece cryptosystem and its variants.
-
Workshop 3.6:
Other promising PQC approaches (e.g., Multivariate, Isogeny-based).
-
Workshop 4.1:
Strategies for implementing hybrid cryptographic solutions (classical + PQC)
-
Workshop 4.2:
Migrating cryptographic protocols (e.g., TLS, VPNs) to quantum-safe versions
-
Workshop 4.3:
Securing key exchange and digital signatures in a post-quantum world
-
Workshop 4.4:
Integrating PQC into existing IT infrastructure and applications
-
Workshop 4.5:
Challenges of retrofitting legacy systems with quantum-resistant crypto
-
Workshop 5.1:
Developing audit objectives and scope for quantum security readiness.
-
Workshop 5.2:
Module on PQC Implementation Audit: Verifying correct deployment and configuration of new algorithms.
-
Workshop 5.3:
Auditing key management systems for quantum resistance.
-
Workshop 5.4:
Assessing cryptographic agility: ability to quickly switch algorithms.
-
Workshop 5.5:
Reviewing patch management and software update processes for PQC.
-
Workshop 6.1:
Establishing a quantum cybersecurity governance framework.
-
Workshop 6.2:
Incorporating quantum risks into enterprise risk management (ERM) frameworks.
-
Workshop 6.3:
Compliance with emerging regulations and standards for quantum security.
-
Workshop 6.4:
Developing a quantum resilience roadmap: timelines, resource allocation, testing.
-
Workshop 6.5:
Legal and ethical considerations of quantum computing on data privacy and security.
-
Workshop 7.1:
Quantum Key Distribution (QKD): principles, applications, and limitations for secure communication.
-
Workshop 7.2:
Quantum-resistant Hardware Security Modules (HSMs) and their role.
-
Workshop 7.3:
Auditing quantum-enabled systems and quantum software development.
-
Workshop 7.4:
Emerging threats and countermeasures in the quantum computing landscape.
-
Workshop 7.5:
Continuous monitoring, threat intelligence, and adapting to quantum advancements.
