QRAMM - The Cryptographic Migration to a Post Quantum World

Learn about the QRAMM (Quantum Readiness Assurance Maturity Model) framework in this 23-minute DEF CON 33 conference talk that addresses the critical challenge of transitioning organizations from legacy cryptographic systems to quantum-resistant alternatives following NIST's standardization of post-quantum cryptography. Discover how this open-source framework evaluates organizational preparedness across four essential dimensions: cryptographic visibility, data protection, technical implementation, and governance. Explore the framework's design principles and practical applications, with particular emphasis on cryptographic agility as the cornerstone for building adaptive, forward-compatible security strategies that can withstand the quantum computing threat. Gain insights into why successful post-quantum migration requires more than simple algorithmic replacements and demands comprehensive systemic agility and operational readiness across entire organizations.