Markdown Editor
Editor öffnen

Kit Post-Quanten-Kryptografie

Umstieg auf PQC planen: Inventar, Kryptografie-Standard, Migrationsplan, PKI, Secrets und befristete Ausnahmen.

9 Vorlagen in 3 Schritten, in der Reihenfolge der Nutzung. Öffnen Sie eine Vorlage im Editor, füllen Sie sie aus und exportieren Sie sie als PDF, DOCX oder HTML.

Schritt 1

Bewertungen

  1. Asset Inventory and Classification Template

    Kompakt

    Asset inventory: classification and labelling scheme, defined CIA scale, information and associated assets, return and disposal rules, lifecycle log

    ISO/IEC 27001:2022 A.5.9, A.5.11 to A.5.13, A.7.14

  2. Cryptography Standard Template (NIST SP 800-57, IR 8547)

    Vollständig

    Approved algorithms and key sizes, deprecation dates to 2035, TLS 1.3 and hybrid ML-KEM, RNG, password hashing, key lifecycle, agility, checks, exceptions

    NIST SP 800-57 Pt 1 Rev. 5; SP 800-131A Rev. 2; NIST IR 8547 (final 2026); RFC 8446, RFC 10024

  3. Risk Register Template

    Standard

    Risk register with appetite, inherent and residual scores, Annex A controls, owner acceptance with expiry, inherent and residual heat maps, review log

    ISO/IEC 27001:2022 + Amd 1:2024 cl. 8.2, 8.3; ISO 31000:2018

  4. Supplier Security Assessment Template

    Standard

    Supplier tiering with review intervals, security posture checklist, secure development and SBOM questions, concentration and exit risk, NIS2, DORA, CRA, GDPR hooks, decision

    ISO/IEC 27001:2022 A.5.19 to A.5.23; NIS2 Art. 21; DORA Art. 28 to 30; CRA Annex I
Schritt 2

Planung

  1. Post-Quantum Cryptography Migration Plan Template (NIST IR 8547)

    Vollständig

    Drivers and dates, CBOM inventory, Mosca risk ranking, ML-KEM and ML-DSA targets, hybrid-first waves, agility design, vendor tracker, tests, metrics

    NIST IR 8547 (final 2026); FIPS 203, 204, 205; OMB M-26-15; RFC 10024

  2. PKI and Certificate Architecture Template (RFC 3647, 47-Day TLS)

    Vollständig

    Use cases, CA hierarchy and HSMs, profiles, ACME/ARI, 200/100/47-day renewal, CRL/OCSP, SPIFFE mTLS, inventory, compromise, PQC, CP/CPS map

    RFC 5280; RFC 3647; RFC 8555; CA/B Forum Baseline Requirements (Ballot SC-081v3); NIST IR 8547 (final 2026)

  3. Architecture Roadmap and Transition Architectures Template (TOGAF E, F)

    Vollständig

    Consolidated gaps, work packages, Transition Architectures, dependencies, value and risk per increment, migration plan, costs, Phase G hand-off

    The TOGAF Standard, 10th Edition (2025 release with Technical Corrigendum 1), ADM Phases E and F; ArchiMate 4 Plateaus (names only)
Schritt 3

Betrieb

  1. Secrets Management Standard Template (OWASP, NIST SP 800-57)

    Vollständig

    Secrets standard: classes, inventory, approved stores, issuance, rotation, workload identity, CI/CD and Kubernetes rules, scanning, leak response, break-glass

    OWASP Secrets Management Cheat Sheet; NIST SP 800-57 Pt 1 Rev. 5; SP 800-53 Rev. 5

  2. Security Exception Request Template (Risk Acceptance)

    Standard

    Policy exception and risk acceptance form: requirement not met, justification, inherent and residual risk, compensating controls, approver tiers, expiry, lifecycle

    ISO/IEC 27001:2022 cl. 6.1.3, 8.3 (cited only); NIST SP 800-53 Rev. 5 PM-9, RA-7