पोस्ट-क्वांटम क्रिप्टोग्राफ़ी किट

Asset inventory: classification and labelling scheme, defined CIA scale, information and associated assets, return and disposal rules, lifecycle log

Approved algorithms and key sizes, deprecation dates to 2035, TLS 1.3 and hybrid ML-KEM, RNG, password hashing, key lifecycle, agility, checks, exceptions

Risk register with appetite, inherent and residual scores, Annex A controls, owner acceptance with expiry, inherent and residual heat maps, review log

Supplier tiering with review intervals, security posture checklist, secure development and SBOM questions, concentration and exit risk, NIS2, DORA, CRA, GDPR hooks, decision

Drivers and dates, CBOM inventory, Mosca risk ranking, ML-KEM and ML-DSA targets, hybrid-first waves, agility design, vendor tracker, tests, metrics

Use cases, CA hierarchy and HSMs, profiles, ACME/ARI, 200/100/47-day renewal, CRL/OCSP, SPIFFE mTLS, inventory, compromise, PQC, CP/CPS map

Consolidated gaps, work packages, Transition Architectures, dependencies, value and risk per increment, migration plan, costs, Phase G hand-off

Secrets standard: classes, inventory, approved stores, issuance, rotation, workload identity, CI/CD and Kubernetes rules, scanning, leak response, break-glass

Policy exception and risk acceptance form: requirement not met, justification, inherent and residual risk, compensating controls, approver tiers, expiry, lifecycle