Certifying the future; synchronizing EUDI wallets and quantum-readiness

Certifying the future; synchronizing EUDI wallets and quantum-readiness

What You’ll Learn * Why the 2026 deployment mandate for EUDI Wallets creates immediate urgency * The specific risks of storing biometric and identity data in a quantum environment * How laboratories help vendors prove their security claims through independent review * Why back-end systems adapt to new protocols faster than hardware devices * The role of ENISA and the European Commission in shaping certification schemes * How the Cyber Resilience Act affects both new and legacy products * Why crypto agility is the only way to manage overlapping regulatory timelines * The primary reason most security systems fail during real-world use Guest bio Wei Yuan is lab manager and director of operations at Applus+ Laboratories. Working at the boundary of high-assurance evaluation, hardware security, and regulatory policy, he serves as an expert within ENISA working groups, helping shape European digital identity certification standards and transition pathways to post-quantum cryptography. Shielded: The Last Line of Cyber Defense is handcrafted by our friends over at: fame.so [https://www.fame.so/?utm_medium=podcast&utm_source=bcast&utm_campaign=masters-of-community-with-david-spinks?utm_medium=podcast&utm_source=bcast&utm_campaign=fame-client]

Building a browser-based sandbox for quantum-safe migration

Content Eric Amador from Thales joins the show to discuss pqctoday.com, an open initiative designed to simplify quantum-safe migration. Discover how browser-based cryptographic tools and AI help organizations understand upcoming global timelines, test new algorithms like ML-KEM without friction, and prepare for the quantum threat. What you'll learn * How WebAssembly allows users to test ML-KEM and ML-DSA directly in a browser without complex installations. * The strategic differences in regional migration timelines between Australia, the United States, and global standards bodies. * Why modern cryptographic migration requires a focus on long-term governance rather than a simple algorithm swap. * How AI technology curates specific preparation tracks for developers, DevOps teams, and executives. Eric Amador, a Product Manager at Thales, recognized that organizations struggle to find clear, actionable details on post-quantum preparation. To address this gap, he launched an open initiative that helps security teams simulate post-quantum protocols instantly. The platform uses AI to summarize complex document updates from IETF volunteers and standard bodies such as NIST. By focusing on education and awareness, the platform helps security leaders build a business case for crypto-agility before engaging with commercial vendors. Eric Amador brings years of hands-on product experience across multiple industries, guiding technical professionals and executives through cryptographic transitions. He currently manages product strategies at Thales while running open-source initiatives to democratize quantum-safe security tools. Shielded: The Last Line of Cyber Defense is handcrafted by our friends over at: fame.so [https://www.fame.so/?utm_medium=podcast&utm_source=bcast&utm_campaign=masters-of-community-with-david-spinks?utm_medium=podcast&utm_source=bcast&utm_campaign=fame-client]

Phased Timelines: DSCI roadmap for India's PQC migration

India is accelerating its transition to quantum-safe systems to protect its vast digital public infrastructure. The Data Security Council of India has been instrumental in shaping a roadmap that addresses the unique challenges of the Indian ecosystem. High transaction volumes and deeply interconnected systems make organizational security a paramount concern for national stability. The roadmap defines two distinct tracks for migration based on the criticality of the systems involved. Critical information infrastructure must achieve full migration by the end of 2029, while general enterprises have a slightly longer horizon ending in 2033. These timelines reflect recent scientific updates suggesting that cryptographically relevant quantum computers may arrive sooner than previously anticipated. Successful migration requires more than just replacing algorithms; it demands a focus on cryptographic agility and sovereign security needs. By aligning with global standards like NIST while maintaining the flexibility for national requirements, India aims to ensure long-term viability in the quantum era. The strategy emphasizes that quantum resiliency is a broad organizational mandate rather than a simple technical update. What you’ll learn * The specific milestones for India’s critical information infrastructure transition. * How India’s digital public infrastructure influences its national quantum strategy. * The difference between national advisory guidelines and sectoral enforcement. * Why the 2029 horizon is becoming a global benchmark for quantum readiness. * The importance of cryptographic agility in modern system design. * Practical steps for organizations to begin their quantum risk assessments today. About Teja Chintalapati and Vinayak Godse Vinayak Godse is the CEO of the Data Security Council of India and has spent nearly three decades building national cybersecurity frameworks. He chaired the committee responsible for devising India’s quantum migration roadmap.  Teja Chintalapati is a senior consultant at DSCI specializing in quantum resiliency and cybersecurity strategy. Your roadmap to quantum resilience [02:17] Step 1: Analyze the historical context of India’s quantum focus Vinayak shares how India’s interest in quantum technology dates back to 2015. He explains the evolution from theoretical research to the creation of a national task force for quantum-safe migration. Key Question: Does your organization’s history with emerging tech inform your current security strategy? [10:19] Step 2: Understand the scale of India’s digital public infrastructure The guests describe the massive volume of digital transactions in India facilitated by systems like UPI and Aadhaar. They discuss how this democratization of digital access necessitates a robust quantum defense. Key Question: How does the interconnected nature of your digital ecosystem increase your quantum risk? [23:44] Step 3: Implement aggressive timelines for critical sectors Teja outlines the specific milestones for critical information infrastructure, aiming for full migration by December 31, 2029. He discusses why these aggressive targets are necessary given the changing geopolitical landscape. Key Question: Are your internal migration deadlines aligned with the accelerating threat of quantum computing? [33:08] Step 4: Balance global interoperability with sovereign security The discussion covers the use of NIST standards alongside the potential for sovereign Indian algorithms. Vinayak emphasizes that cryptographic agility is the primary tool for managing this balance. Key Question: Is your infrastructure agile enough to adopt new algorithms without system-wide failures? [41:24] Step 5: Leverage existing best practices for immediate action The guests advise organizations to start with available global materials and risk assessment frameworks. They highlight that the vendor ecosystem is already shifting to support quantum-safe capabilities. Key Question: What steps can you take today to evaluate your most critical cryptographic dependencies? Episode resources Vinayak Godse on LinkedIn [https://www.linkedin.com/in/vinayakgodse/] Teja Chintalapati on LinkedIn [https://www.linkedin.com/in/tejachintalapati/] Want exclusive insights on quantum migration? Stay ahead of the curve. Subscribe to Shielded: The Last Line of Cyber Defense on Apple Podcasts, Spotify, or YouTube Podcasts.  ✔ Get insider knowledge from leading cybersecurity experts.  ✔ Learn practical steps to future-proof your organization.  ✔ Stay updated on regulatory changes and industry trends. Shielded: The Last Line of Cyber Defense is handcrafted by our friends over at: fame.so [https://www.fame.so/?utm_medium=podcast&utm_source=bcast&utm_campaign=masters-of-community-with-david-spinks?utm_medium=podcast&utm_source=bcast&utm_campaign=fame-client]

Curing Inventory Paralysis: Perfect Data is the Enemy of real-world Progress

The migration to quantum-safe systems is often stalled by a desire for perfect visibility. Antti Ropponen joins host Jo Lintzen to discuss why waiting for a 100% accurate inventory often leads to inaction. Drawing on years of experience in cloud modernization, Antti highlights the similarities between "lifting and shifting" workloads and simply swapping cryptographic algorithms. The conversation covers the necessity of moving beyond technical silos. Antti shares insights from an IBM study showing that the majority of quantum-safe programs now live outside the CISO office, often residing within CTO or digital transformation departments. He provides a framework for prioritizing migration based on risk, regulation, and business value, while offering practical advice on funding these multi-year programs by integrating them into existing IT refresh cycles. What You’ll Learn * Why the 2019 South European bank project served as a lightbulb moment for quantum risk * How to avoid the trap of "inventory paralysis" during discovery phases * The dangers of treating quantum migration as a simple "flick of a switch" exercise * Why post-quantum cryptography programs are moving from the CISO to the CTO office * Methods for using regulation as a prioritization factor rather than just a checkbox * Strategies for quantifying risk reduction to build a compelling financial business case * Nuances in migration priorities between the financial and pharmaceutical sectors * How to treat quantum-safe transitions as "business as usual" engineering About Antti Ropponen  Antti Ropponen serves as the Global Quantum Safe Transformation Leader at IBM Consulting. He drives the execution and scaling of quantum-safe programs across EMEA, working directly with CISOs and CTOs to move organizations from theoretical risk toward real-world migration. With a background in cloud migration and security modernization, Antti focuses on the organizational and architectural complexities of large-scale cryptographic transitions. Your Roadmap to Quantum Transformation [00:08:19] Step 1: Avoid the Inventory Paralysis Trap  Organizations often stall their progress by trying to achieve a perfect, 100% accurate inventory before taking action. Data quality fluctuates quickly as systems change, making a complete snapshot nearly impossible. Focus instead on risk-based classification to identify where the most critical vulnerabilities live.  Key Question: Are you waiting for a perfect list of assets before starting your mitigation planning? [00:16:36] Step 2: Adopt Cryptographic Landing Zones  Drawing on cloud migration best practices, organizations should utilize reference architectures and target patterns. Following established templates ensures that necessary security boxes are checked without requiring a deep dive into every individual system component.  Key Question: Can you simplify your transition by applying standardized architectural patterns to your critical trust flows? [00:21:10] Step 3: Elevate the Program Beyond Technical Silos  Successful migration is an organizational and cultural transformation rather than a localized security project. Because these programs require coordination across hundreds of teams, they often find a more natural home in the CTO office or a digital transformation department where they have broader visibility.  Key Question: Does your quantum-safe program have the organizational authority to influence the backlogs of application and platform teams? [00:26:19] Step 4: Use Regulation as a Prioritization Factor  Compliance frameworks like GDPR or the Cyber Resilience Act should be treated as tools for making a business case. By integrating regulatory requirements into your risk score, you can prioritize efforts that offer the highest value in terms of both resilience and legal standing.  Key Question: Is regulation driving your roadmap, or is it one factor in a more holistic risk-based strategy? [00:31:08] Step 5: Embed Migration into Existing Refresh Cycles  Building a business case is easier when you align quantum-safe requirements with existing digital transformation or infrastructure refreshment programs. This approach avoids creating a "net new" legacy and ensures that future projects are quantum-safe by design from day one.  Key Question: Which upcoming IT modernization projects can serve as a vehicle for your post-quantum upgrades? Episode Resources * Antti Ropponen on LinkedIn [https://www.linkedin.com/in/antti-ropponen/] * Johannes Lintzen on LinkedIn [https://www.linkedin.com/in/jolintzen/]  * PQShield Website [http://www.pqshield.com]  Shielded: The Last Line of Cyber Defense is handcrafted by our friends over at: fame.so [https://www.fame.so/?utm_medium=podcast&utm_source=bcast&utm_campaign=masters-of-community-with-david-spinks?utm_medium=podcast&utm_source=bcast&utm_campaign=fame-client]

Moving From Awareness To Action: The Board's Role In Organizational Resilience

Most organizations currently view the arrival of a cryptanalytically relevant quantum computer as a distant technical concern, but Louise Davey argues that it is a present-day governance crisis requiring immediate board-level action. In this episode, she explores how technical practitioners can successfully carry this issue to the top of an organization by moving the conversation away from qubits and toward fiduciary duty and operational resilience. Louise highlights the unique timing offset inherent in the "harvest now, decrypt later" threat, which complicates traditional risk management because the decisions made today affect a security landscape that will manifest long after current leaders have moved on. The discussion further examines the three primary breakages that quantum computing causes in standard risk models, specifically regarding ownership, remediation, and the foundational assumptions of digital trust. Louise points out that many organizations fail by treating the quantum transition as an IT project. She clarifies that while IT is an essential enabler for execution, the business must own the strategy and accountability to ensure multi-year programs receive the necessary budget and sustained focus. When the strategy lacks business-led ownership, it risks stalling during the long slog of defending the program through various political complexities. The discussion concludes with actionable advice for boards to move from awareness to execution through expert advisory and rapid risk assessments. Louise explains the incredible power of an inquiring board to shift organizational priorities overnight. By asking the right questions and recording them in meeting minutes, boards can transform a slow-moving technical initiative into a high-priority mandate for organizational resilience.  What you’ll learn * How to translate technical quantum risks into the language of business. * Why the timing offset makes quantum risk different from traditional cyber threats. * * The three primary breakages in standard risk management caused by quantum computing. * Why IT should be the executor rather than the owner of a transformation. * The importance of a business-led steering committee for accountability. * The first practical steps boards can take to begin the transition. About Louise Davey Louise Davey is the president of LDIQ and an expert in quantum readiness and post-quantum cryptography. She is the author of Quantum How, a guide for leadership in the quantum era, and brings a unique perspective as a former experimental nuclear physicist who transitioned into business leadership. Your roadmap to quantum resilience [01:14] Step 1: Connect physics with business dynamics Louise shares how her background in experimental nuclear physics helped her understand the structural dynamics of large organizations. She discusses the transition from laboratory research to the business world and how these two fields intersect in the quantum era. Key Question: Is your leadership team viewing quantum readiness through a scientific lens or a business lens? [08:37] Step 2: Reframe the conversation for the boardroom Technical practitioners often focus on qubits and algorithms, but these concepts can lose the attention of executive leadership. Louise explains how to shift the dialogue toward operational resilience and the potential impacts on an organization’s long-term viability. Key Question: How can you translate cryptographic vulnerabilities into measurable business impacts like reputation and compliance? [15:30] Step 3: Address the timing offset and digital trust The risk of harvest now, decrypt later means that the actions taken today affect the security of the organization in the future. Louise describes how this dynamic invalidates current assumptions about digital trust and identity. Key Question: Does your current risk management framework account for threats that will manifest long after the initial data harvest? [23:08] Step 4: Establish business ownership of the transformation A common failure mode in large transformations is the assumption that IT should lead the initiative. Louise emphasizes that IT is an enabler and that the strategy must be driven by business leadership through structured committees. Key Question: Who in the business is presiding over the committee that is accountable for your quantum transition? [37:00] Step 5: Move from awareness to actionable advisory The final step involves securing expert guidance to educate the board and senior executive teams. Louise outlines the importance of performing a rapid risk assessment to ensure the organization is directionally correct from the start. Key Question: Has your board been equipped with the right questions to challenge the information they receive about quantum risk? Episode resources Louise Davey on LinkedIn [https://www.linkedin.com/in/louisedavey/] LDIQ Website  [https://ldiq.ca/] Johannes Lintzen on LinkedIn  [http://linkedin.com/in/jolintzen/?skipRedirect=true] PQShield Website [https://pqshield.com/] Want exclusive insights on quantum migration? Stay ahead of the curve. Subscribe to Shielded: The Last Line of Cyber Defense on Apple Podcasts, Spotify, or YouTube Podcasts. ✔ Get insider knowledge from leading cybersecurity experts. ✔ Learn practical steps to future-proof your organization. ✔ Stay updated on regulatory changes and industry trends. Need help subscribing? Click here [https://www.fame.so/follow-rate-review] for step-by-step instructions. Shielded: The Last Line of Cyber Defense is handcrafted by our friends over at: fame.so [https://www.fame.so/?utm_medium=podcast&utm_source=bcast&utm_campaign=masters-of-community-with-david-spinks?utm_medium=podcast&utm_source=bcast&utm_campaign=fame-client]