QTS

Quantum Security

31 controls

Mitigate quantum-enabled cryptographic risks through governance structures that operationalize Post-Quantum Cryptography (PQC) risk management practices.

SCF #	Control Name	Weight	NIST CSF	Frameworks
QTS-01	Quantum Security Policy	7 — High	Protect	1
QTS-02	Quantum Risk Governance	7 — High	Protect	0
QTS-03	Data Shelf-Life Classification for Post-Quantum Cryptography (PQC) Prioritization	7 — High	Identify	1
QTS-03.1	Long-Lived Data Identification	7 — High	Identify	0
QTS-04	Cryptographic Agility Risk Assessment (CARA)	7 — High	Protect	3
QTS-04.1	Cryptographic Exception Register	7 — High	Protect	0
QTS-04.2	Compensating Controls for Quantum-Vulnerable Systems	7 — High	Protect	0
QTS-04.3	Crypto Agility Maturity Assessment	7 — High	Protect	1
QTS-05	Harvest Now, Decrypt Later (HNDL) Mitigation	7 — High	Protect	0
QTS-06	Post-Quantum Cryptography Agility Plan (PQCAP)	7 — High	Protect	5
QTS-06.1	Post-Quantum Cryptography (PQC) Transition Planning & Hybrid Mode Support	7 — High	Protect	1
QTS-06.2	Post-Quantum Cryptography (PQC) Migration Progress Oversight	7 — High	Protect	0
QTS-06.3	Post-Quantum Cryptography (PQC) Supply Chain Visibility	7 — High	Protect	0
QTS-06.4	Post-Quantum Cryptography (PQC) Supply Chain Flow-Down Requirements	7 — High	Protect	0
QTS-07	Post-Quantum Cryptography (PQC) Discovery & Visibility	7 — High	Protect	1
QTS-07.1	Post-Quantum Cryptography (PQC) Asset Inventory	7 — High	Identify	1
QTS-07.2	Post-Quantum Cryptography Exposure	7 — High	Protect	0
QTS-08	Quantum Threat Intelligence Monitoring	7 — High	Protect	1
QTS-08.1	Collaboration & Information Sharing	7 — High	Protect	0
QTS-09	Crypto-Agility Architecture	7 — High	Protect	2
QTS-09.1	Entropy Source & Random Bit Generation	7 — High	Protect	1
QTS-09.2	Stateful Hash-Based Signatures for Firmware & Code Signing	7 — High	Protect	0
QTS-09.3	Approved Post-Quantum Cryptography (PQC) Algorithm Use	7 — High	Protect	1
QTS-09.4	Post-Quantum Cryptography (PQC) Validation Requirements	7 — High	Protect	0
QTS-09.5	Deprecated Cryptographic Algorithms	7 — High	Protect	2
QTS-09.6	Post-Quantum Cryptography (PQC) Key Management	7 — High	Protect	0
QTS-09.7	Quantum-Safe Public Key Infrastructure (PKI) Transition	7 — High	Protect	0
QTS-09.8	Algorithm Negotiation Integrity	7 — High	Protect	0
QTS-09.9	Hybrid / Composite Cryptography	7 — High	Protect	2
QTS-09.10	Cryptographic Application Programming Interface (API) Abstraction	7 — High	Protect	0
QTS-10	Post-Quantum Cryptography (PQC) Implementation Validation & Interoperability Testing	7 — High	Protect	0

The Secure Controls Framework (SCF) is maintained by SCF Council. Use of SCF content is subject to the SCF Terms & Conditions.

Quantum Security

Manage SCF Controls in SCF Connect