Briefings that end in a decision

Who each briefing is for

Different audiences need different framings of the same truth. We tailor the message without changing the facts.

The 10-minute board briefing

For directors who need to discharge their oversight duty, not become cryptographers. It answers the three questions every board asks — Are we at risk right now? What is it going to cost? What do you need from us? — and closes on a single decision and a named owner. Framed around business continuity, fiduciary duty, and reputational exposure.

The executive & CISO briefing

For the leaders who will sponsor and run the program. It covers the threat model (harvest-now-decrypt-later), the regulatory clock (NIST standards and CNSA 2.0 deadlines), your likely exposure via Mosca's Inequality, and a phased plan with budget ranges and a realistic timeline.

The technical deep-dive

For architects and security engineers. Hybrid key exchange in TLS 1.3, the NIST algorithm families, cryptographic discovery and CBOM, PKI and signature migration, and crypto-agility patterns — with the trade-offs made explicit.

Briefing topics

Each can stand alone or be sequenced into a short program:

• The quantum threat, honestly. What is and isn't broken, and on what timeline.
• Harvest now, decrypt later. Why the attack has already begun and why long-lived data is exposed today.
• Reading your exposure. Applying Mosca's Inequality across your data estate.
• The regulatory calendar. NIST FIPS 203/204/205 and the CNSA 2.0 deprecation dates that affect you.
• Hybrid as the bridge. How to start migrating this quarter with production-proven techniques.
• Making the business case. Planned migration versus the cost of inaction.

What you walk away with

1. A shared, jargon-free understanding of the risk across your leadership.
2. A one-page summary of your exposure and the deadlines that apply to you.
3. A recommended next step — usually a scoped cryptographic discovery engagement — with an owner attached.

Related: CNSA 2.0 primer · Mosca's Inequality · Hybrid TLS guide