Markdown Editor
Mở trình soạn thảo

Bộ mẫu mật mã hậu lượng tử

Lập kế hoạch chuyển sang mật mã hậu lượng tử: kiểm kê, chuẩn mật mã, kế hoạch chuyển đổi, PKI, secret và ngoại lệ có thời hạn.

9 mẫu trong 3 bước, theo thứ tự sử dụng. Mở mẫu bất kỳ trong trình soạn thảo, điền nội dung rồi xuất ra PDF, DOCX hoặc HTML.

Bước 1

Đánh giá tác động

  1. Asset Inventory and Classification Template

    Gọn

    Asset inventory: classification and labelling scheme, defined CIA scale, information and associated assets, return and disposal rules, lifecycle log

    ISO/IEC 27001:2022 A.5.9, A.5.11 to A.5.13, A.7.14

  2. Cryptography Standard Template (NIST SP 800-57, IR 8547)

    Đầy đủ

    Approved algorithms and key sizes, deprecation dates to 2035, TLS 1.3 and hybrid ML-KEM, RNG, password hashing, key lifecycle, agility, checks, exceptions

    NIST SP 800-57 Pt 1 Rev. 5; SP 800-131A Rev. 2; NIST IR 8547 (final 2026); RFC 8446, RFC 10024

  3. Risk Register Template

    Chuẩn

    Risk register with appetite, inherent and residual scores, Annex A controls, owner acceptance with expiry, inherent and residual heat maps, review log

    ISO/IEC 27001:2022 + Amd 1:2024 cl. 8.2, 8.3; ISO 31000:2018

  4. Supplier Security Assessment Template

    Chuẩn

    Supplier tiering with review intervals, security posture checklist, secure development and SBOM questions, concentration and exit risk, NIS2, DORA, CRA, GDPR hooks, decision

    ISO/IEC 27001:2022 A.5.19 to A.5.23; NIS2 Art. 21; DORA Art. 28 to 30; CRA Annex I
Bước 2

Lập kế hoạch

  1. Post-Quantum Cryptography Migration Plan Template (NIST IR 8547)

    Đầy đủ

    Drivers and dates, CBOM inventory, Mosca risk ranking, ML-KEM and ML-DSA targets, hybrid-first waves, agility design, vendor tracker, tests, metrics

    NIST IR 8547 (final 2026); FIPS 203, 204, 205; OMB M-26-15; RFC 10024

  2. PKI and Certificate Architecture Template (RFC 3647, 47-Day TLS)

    Đầy đủ

    Use cases, CA hierarchy and HSMs, profiles, ACME/ARI, 200/100/47-day renewal, CRL/OCSP, SPIFFE mTLS, inventory, compromise, PQC, CP/CPS map

    RFC 5280; RFC 3647; RFC 8555; CA/B Forum Baseline Requirements (Ballot SC-081v3); NIST IR 8547 (final 2026)

  3. Architecture Roadmap and Transition Architectures Template (TOGAF E, F)

    Đầy đủ

    Consolidated gaps, work packages, Transition Architectures, dependencies, value and risk per increment, migration plan, costs, Phase G hand-off

    The TOGAF Standard, 10th Edition (2025 release with Technical Corrigendum 1), ADM Phases E and F; ArchiMate 4 Plateaus (names only)
Bước 3

Vận hành

  1. Secrets Management Standard Template (OWASP, NIST SP 800-57)

    Đầy đủ

    Secrets standard: classes, inventory, approved stores, issuance, rotation, workload identity, CI/CD and Kubernetes rules, scanning, leak response, break-glass

    OWASP Secrets Management Cheat Sheet; NIST SP 800-57 Pt 1 Rev. 5; SP 800-53 Rev. 5

  2. Security Exception Request Template (Risk Acceptance)

    Chuẩn

    Policy exception and risk acceptance form: requirement not met, justification, inherent and residual risk, compensating controls, approver tiers, expiry, lifecycle

    ISO/IEC 27001:2022 cl. 6.1.3, 8.3 (cited only); NIST SP 800-53 Rev. 5 PM-9, RA-7