Markdown Editor
Buka editor

Kit kriptografi pasca-kuantum

Rencanakan peralihan ke kripto pasca-kuantum: inventaris, standar kriptografi, rencana migrasi, PKI, secret, dan pengecualian berbatas waktu.

9 templat dalam 3 langkah, sesuai urutan penggunaan. Buka templat mana pun di editor, isi, lalu ekspor ke PDF, DOCX, atau HTML.

Langkah 1

Penilaian

  1. Asset Inventory and Classification Template

    Ringkas

    Asset inventory: classification and labelling scheme, defined CIA scale, information and associated assets, return and disposal rules, lifecycle log

    ISO/IEC 27001:2022 A.5.9, A.5.11 to A.5.13, A.7.14

  2. Cryptography Standard Template (NIST SP 800-57, IR 8547)

    Lengkap

    Approved algorithms and key sizes, deprecation dates to 2035, TLS 1.3 and hybrid ML-KEM, RNG, password hashing, key lifecycle, agility, checks, exceptions

    NIST SP 800-57 Pt 1 Rev. 5; SP 800-131A Rev. 2; NIST IR 8547 (final 2026); RFC 8446, RFC 10024

  3. Risk Register Template

    Standar

    Risk register with appetite, inherent and residual scores, Annex A controls, owner acceptance with expiry, inherent and residual heat maps, review log

    ISO/IEC 27001:2022 + Amd 1:2024 cl. 8.2, 8.3; ISO 31000:2018

  4. Supplier Security Assessment Template

    Standar

    Supplier tiering with review intervals, security posture checklist, secure development and SBOM questions, concentration and exit risk, NIS2, DORA, CRA, GDPR hooks, decision

    ISO/IEC 27001:2022 A.5.19 to A.5.23; NIS2 Art. 21; DORA Art. 28 to 30; CRA Annex I
Langkah 2

Perencanaan

  1. Post-Quantum Cryptography Migration Plan Template (NIST IR 8547)

    Lengkap

    Drivers and dates, CBOM inventory, Mosca risk ranking, ML-KEM and ML-DSA targets, hybrid-first waves, agility design, vendor tracker, tests, metrics

    NIST IR 8547 (final 2026); FIPS 203, 204, 205; OMB M-26-15; RFC 10024

  2. PKI and Certificate Architecture Template (RFC 3647, 47-Day TLS)

    Lengkap

    Use cases, CA hierarchy and HSMs, profiles, ACME/ARI, 200/100/47-day renewal, CRL/OCSP, SPIFFE mTLS, inventory, compromise, PQC, CP/CPS map

    RFC 5280; RFC 3647; RFC 8555; CA/B Forum Baseline Requirements (Ballot SC-081v3); NIST IR 8547 (final 2026)

  3. Architecture Roadmap and Transition Architectures Template (TOGAF E, F)

    Lengkap

    Consolidated gaps, work packages, Transition Architectures, dependencies, value and risk per increment, migration plan, costs, Phase G hand-off

    The TOGAF Standard, 10th Edition (2025 release with Technical Corrigendum 1), ADM Phases E and F; ArchiMate 4 Plateaus (names only)
Langkah 3

Operasi

  1. Secrets Management Standard Template (OWASP, NIST SP 800-57)

    Lengkap

    Secrets standard: classes, inventory, approved stores, issuance, rotation, workload identity, CI/CD and Kubernetes rules, scanning, leak response, break-glass

    OWASP Secrets Management Cheat Sheet; NIST SP 800-57 Pt 1 Rev. 5; SP 800-53 Rev. 5

  2. Security Exception Request Template (Risk Acceptance)

    Standar

    Policy exception and risk acceptance form: requirement not met, justification, inherent and residual risk, compensating controls, approver tiers, expiry, lifecycle

    ISO/IEC 27001:2022 cl. 6.1.3, 8.3 (cited only); NIST SP 800-53 Rev. 5 PM-9, RA-7