Markdown Editor
打开编辑器

后量子密码套件

规划向后量子密码迁移：清单、密码标准、迁移计划、PKI、密钥管理与限时例外。

9 个模板，按使用顺序分为 3 步。在编辑器中打开任一模板，填写后可导出为 PDF、DOCX 或 HTML。

第 1 步

评估

  1. Asset Inventory and Classification Template

    精简

    Asset inventory: classification and labelling scheme, defined CIA scale, information and associated assets, return and disposal rules, lifecycle log

    ISO/IEC 27001:2022 A.5.9, A.5.11 to A.5.13, A.7.14

  2. Cryptography Standard Template (NIST SP 800-57, IR 8547)

    完整

    Approved algorithms and key sizes, deprecation dates to 2035, TLS 1.3 and hybrid ML-KEM, RNG, password hashing, key lifecycle, agility, checks, exceptions

    NIST SP 800-57 Pt 1 Rev. 5; SP 800-131A Rev. 2; NIST IR 8547 (final 2026); RFC 8446, RFC 10024

  3. Risk Register Template

    标准

    Risk register with appetite, inherent and residual scores, Annex A controls, owner acceptance with expiry, inherent and residual heat maps, review log

    ISO/IEC 27001:2022 + Amd 1:2024 cl. 8.2, 8.3; ISO 31000:2018

  4. Supplier Security Assessment Template

    标准

    Supplier tiering with review intervals, security posture checklist, secure development and SBOM questions, concentration and exit risk, NIS2, DORA, CRA, GDPR hooks, decision

    ISO/IEC 27001:2022 A.5.19 to A.5.23; NIS2 Art. 21; DORA Art. 28 to 30; CRA Annex I
第 2 步

规划

  1. Post-Quantum Cryptography Migration Plan Template (NIST IR 8547)

    完整

    Drivers and dates, CBOM inventory, Mosca risk ranking, ML-KEM and ML-DSA targets, hybrid-first waves, agility design, vendor tracker, tests, metrics

    NIST IR 8547 (final 2026); FIPS 203, 204, 205; OMB M-26-15; RFC 10024

  2. PKI and Certificate Architecture Template (RFC 3647, 47-Day TLS)

    完整

    Use cases, CA hierarchy and HSMs, profiles, ACME/ARI, 200/100/47-day renewal, CRL/OCSP, SPIFFE mTLS, inventory, compromise, PQC, CP/CPS map

    RFC 5280; RFC 3647; RFC 8555; CA/B Forum Baseline Requirements (Ballot SC-081v3); NIST IR 8547 (final 2026)

  3. Architecture Roadmap and Transition Architectures Template (TOGAF E, F)

    完整

    Consolidated gaps, work packages, Transition Architectures, dependencies, value and risk per increment, migration plan, costs, Phase G hand-off

    The TOGAF Standard, 10th Edition (2025 release with Technical Corrigendum 1), ADM Phases E and F; ArchiMate 4 Plateaus (names only)
第 3 步

运维

  1. Secrets Management Standard Template (OWASP, NIST SP 800-57)

    完整

    Secrets standard: classes, inventory, approved stores, issuance, rotation, workload identity, CI/CD and Kubernetes rules, scanning, leak response, break-glass

    OWASP Secrets Management Cheat Sheet; NIST SP 800-57 Pt 1 Rev. 5; SP 800-53 Rev. 5

  2. Security Exception Request Template (Risk Acceptance)

    标准

    Policy exception and risk acceptance form: requirement not met, justification, inherent and residual risk, compensating controls, approver tiers, expiry, lifecycle

    ISO/IEC 27001:2022 cl. 6.1.3, 8.3 (cited only); NIST SP 800-53 Rev. 5 PM-9, RA-7