Sign in Subscribe

regulatory-watch

Tracking federal and international PQC compliance deadlines including CNSA 2.0, OMB mandates, and emerging regulatory obligations.

CNSA 2.0 Compliance Deadlines by System Type: The Complete Deadline Matrix for Government and Defense Teams

CNSA 2.0 Compliance Deadlines by System Type: The Complete Deadline Matrix for Government and Defense Teams

If your team is tracking CNSA 2.0 as a single 2030 or 2033 deadline, you are already behind on your most immediate obligation. The NSA's Commercial National Security Algorithm Suite 2.0 framework is a phased, system-specific mandate — and the first hard gate, January 1, 2027, falls

Federal PQC Migration Deadlines: What Agencies Actually Face in 2026 and Beyond

Federal PQC Migration Deadlines: What Agencies Actually Face in 2026 and Beyond

Federal PQC Migration Deadlines: What Agencies Actually Face in 2026 and Beyond If your agency is searching for the "2026 federal PQC deadline," here is the most important thing you can read today: no single, universal migration deadline exists for that year. But that correction carries a warning.

Harvest Now, Decrypt Later: Why Every Month of PQC Delay Is an Irreversible Security Decision

Harvest Now, Decrypt Later: Why Every Month of PQC Delay Is an Irreversible Security Decision

Your adversaries are not waiting for Q-Day. They are collecting your encrypted traffic right now — TLS sessions, VPN tunnels, archived communications, financial records — and storing it with the explicit plan to decrypt it once a cryptographically relevant quantum computer exists. This is not a threat model from a research paper.

Federal PQC Migration Deadlines: Debunking the 2026 Myth and Understanding Real U.S. Agency Obligations

Federal PQC Migration Deadlines: Debunking the 2026 Myth and Understanding Real U.S. Agency Obligations

Agency security teams are planning cryptographic modernization budgets around a deadline that does not exist in any U.S. federal directive. The "2026 PQC deadline" circulating in procurement conversations, vendor briefings, and internal security reviews is not an American obligation — and the confusion it is generating is producing