For awareness Medium Awareness
Agencies publish questions to ask vendors about post-quantum cryptography
CISA Cybersecurity Advisoriescritical infrastructure
What happened. CISA, Australia's ACSC and the NSA released joint guidance and a quick-reference list for judging vendor readiness for post-quantum cryptography. It notes that industrial control systems and Internet of Things devices are hard to update and need vendor support.
Who is affected. Organisations relying on vendors for managed services, cloud and cryptography-dependent products, including owners of industrial control systems and Internet of Things devices.
What to do. Use the quick-reference list to ask your vendors about their post-quantum cryptography plans, especially for long-life industrial control systems that need vendor support.
When to act. For awareness: background reading, nothing to schedule
Source: CISA Cybersecurity Advisories (opens cisa.gov)
More on Critical infrastructure