Markdown Editor
에디터 열기

양자 내성 암호 키트

양자 내성 암호 전환 계획: 인벤토리, 암호 표준, 마이그레이션 계획, PKI, 시크릿, 기한이 있는 예외.

사용 순서에 따라 3단계로 정리한 템플릿 9개입니다. 편집기에서 템플릿을 열어 작성한 뒤 PDF, DOCX 또는 HTML로 내보낼 수 있습니다.

1단계

평가

  1. Asset Inventory and Classification Template

    경량

    Asset inventory: classification and labelling scheme, defined CIA scale, information and associated assets, return and disposal rules, lifecycle log

    ISO/IEC 27001:2022 A.5.9, A.5.11 to A.5.13, A.7.14

  2. Cryptography Standard Template (NIST SP 800-57, IR 8547)

    전체

    Approved algorithms and key sizes, deprecation dates to 2035, TLS 1.3 and hybrid ML-KEM, RNG, password hashing, key lifecycle, agility, checks, exceptions

    NIST SP 800-57 Pt 1 Rev. 5; SP 800-131A Rev. 2; NIST IR 8547 (final 2026); RFC 8446, RFC 10024

  3. Risk Register Template

    표준

    Risk register with appetite, inherent and residual scores, Annex A controls, owner acceptance with expiry, inherent and residual heat maps, review log

    ISO/IEC 27001:2022 + Amd 1:2024 cl. 8.2, 8.3; ISO 31000:2018

  4. Supplier Security Assessment Template

    표준

    Supplier tiering with review intervals, security posture checklist, secure development and SBOM questions, concentration and exit risk, NIS2, DORA, CRA, GDPR hooks, decision

    ISO/IEC 27001:2022 A.5.19 to A.5.23; NIS2 Art. 21; DORA Art. 28 to 30; CRA Annex I
2단계

계획

  1. Post-Quantum Cryptography Migration Plan Template (NIST IR 8547)

    전체

    Drivers and dates, CBOM inventory, Mosca risk ranking, ML-KEM and ML-DSA targets, hybrid-first waves, agility design, vendor tracker, tests, metrics

    NIST IR 8547 (final 2026); FIPS 203, 204, 205; OMB M-26-15; RFC 10024

  2. PKI and Certificate Architecture Template (RFC 3647, 47-Day TLS)

    전체

    Use cases, CA hierarchy and HSMs, profiles, ACME/ARI, 200/100/47-day renewal, CRL/OCSP, SPIFFE mTLS, inventory, compromise, PQC, CP/CPS map

    RFC 5280; RFC 3647; RFC 8555; CA/B Forum Baseline Requirements (Ballot SC-081v3); NIST IR 8547 (final 2026)

  3. Architecture Roadmap and Transition Architectures Template (TOGAF E, F)

    전체

    Consolidated gaps, work packages, Transition Architectures, dependencies, value and risk per increment, migration plan, costs, Phase G hand-off

    The TOGAF Standard, 10th Edition (2025 release with Technical Corrigendum 1), ADM Phases E and F; ArchiMate 4 Plateaus (names only)
3단계

운영

  1. Secrets Management Standard Template (OWASP, NIST SP 800-57)

    전체

    Secrets standard: classes, inventory, approved stores, issuance, rotation, workload identity, CI/CD and Kubernetes rules, scanning, leak response, break-glass

    OWASP Secrets Management Cheat Sheet; NIST SP 800-57 Pt 1 Rev. 5; SP 800-53 Rev. 5

  2. Security Exception Request Template (Risk Acceptance)

    표준

    Policy exception and risk acceptance form: requirement not met, justification, inherent and residual risk, compensating controls, approver tiers, expiry, lifecycle

    ISO/IEC 27001:2022 cl. 6.1.3, 8.3 (cited only); NIST SP 800-53 Rev. 5 PM-9, RA-7