Preparing for the Quantum Threat: Practical Steps for Cybersecurity Teams

SANS Institute · Intermediate ·🔐 Cybersecurity ·1y ago

Key Takeaways

Marin Ivezic discusses preparing for the quantum threat by inventorying and hardening crypto, with a focus on automated crypto inventories, rapid PQC plans, and hybrid stop-gaps to reduce risk. He emphasizes the importance of prioritizing long-lived secrets and aligning board-level risk appetite with forthcoming NIST standards.

Original Description

Marin Ivezic shows how to inventory and harden crypto before quantum computers break today’s defenses. SANS Emerging Threats Summit 2025 Quantum-ready now—regulators demand automated crypto inventories and rapid PQC plans. Marin Ivezic, Founder, Applied Quantum, details a step-by-step preparation blueprint. He forecasts cryptographically relevant quantum computers by the early 2030s and reviews U.S./EU mandates that already set deadlines for discovery and mitigation. Marin dissects why manual, interview-driven inventories fail, advocating tool-assisted scans plus targeted deep dives. He outlines hybrid stop-gaps, segmentation, tokenization and early PQC pilots to reduce risk while vendors catch up. Throughout, he stresses prioritizing long-lived secrets—operational tech keys, intellectual property, identity systems—and aligning board-level risk appetite with forthcoming NIST standards. Key Takeaways - Early-2030s CRQCs trigger “store-now-decrypt-later” urgency - Regulations require automated cryptographic discovery today - Tool-assisted scans beat manual interviews for accuracy & scale - Mix PQC, hybrid crypto and network controls for phased defense - Focus first on crown-jewel data with multi-decade confidentiality View upcoming Summits: http://www.sans.org/u/DuS #EmergingThreatsSummit #PostQuantumSecurity #QuantumThreat
Watch on YouTube ↗ (saves to browser)
Sign in to unlock AI tutor explanation · ⚡30

Playlist

Uploads from SANS Institute · SANS Institute · 0 of 60

← Previous Next →
1 SANS FOR610: Reverse Engineering Malware: Malware Analysis Tools & Techniques
SANS FOR610: Reverse Engineering Malware: Malware Analysis Tools & Techniques
SANS Institute
 2 SANS Institute Cybersecurity Training Customer Stories
SANS Institute Cybersecurity Training Customer Stories
SANS Institute
 3 SANS Institute UK Cyber Academy
SANS Institute UK Cyber Academy
SANS Institute
 4 SANS Institute UK Cyber Academy
SANS Institute UK Cyber Academy
SANS Institute
 5 CISSP® Prep Exam, MGT414, by SANS Institute
CISSP® Prep Exam, MGT414, by SANS Institute
SANS Institute
 6 SANS Institute's Rob Lee Discusses The OPM.GOV Hack on CNN
SANS Institute's Rob Lee Discusses The OPM.GOV Hack on CNN
SANS Institute
 7 Information Security Training from SANS Institute - Student Testimonials
Information Security Training from SANS Institute - Student Testimonials
SANS Institute
 8 SANS NetWars
SANS NetWars
SANS Institute
 9 SANS DFIR NetWars
SANS DFIR NetWars
SANS Institute
 10 Hack The Drone - SANS Cyber Academy UK
Hack The Drone - SANS Cyber Academy UK
SANS Institute
 11 SANS VetSuccess Immersion Academy
SANS VetSuccess Immersion Academy
SANS Institute
 12 SANS Cybersecurity Training, Certifications & Placement for Veterans
SANS Cybersecurity Training, Certifications & Placement for Veterans
SANS Institute
 13 The 2015 SANS Holiday Hack Challenge
The 2015 SANS Holiday Hack Challenge
SANS Institute
 14 SANS VetSuccess Academy: Hands-on Skills
SANS VetSuccess Academy: Hands-on Skills
SANS Institute
 15 SANS VetSuccess Academy Overview
SANS VetSuccess Academy Overview
SANS Institute
 16 SANS ICS Security Summit & Training 2017
SANS ICS Security Summit & Training 2017
SANS Institute
 17 Exploring the Unknown Industrial Control System Threat Landscape – SANS ICS Security Summit 2017
Exploring the Unknown Industrial Control System Threat Landscape – SANS ICS Security Summit 2017
SANS Institute
 18 WannaCry recap, patches, and analysis
WannaCry recap, patches, and analysis
SANS Institute
 19 If We’re Doing So Well at Cyber Security, Why Are We Still Doing So Poorly?
If We’re Doing So Well at Cyber Security, Why Are We Still Doing So Poorly?
SANS Institute
 20 Graduation Day - SANS HM Gov Cyber Retraining Academy
Graduation Day - SANS HM Gov Cyber Retraining Academy
SANS Institute
 21 Incentivizing ICS Security: The Case for Cyber Insurance – SANS ICS Security Summit 2017
Incentivizing ICS Security: The Case for Cyber Insurance – SANS ICS Security Summit 2017
SANS Institute
 22 SANS Data Breach Summit & Training 2017
SANS Data Breach Summit & Training 2017
SANS Institute
 23 SANS Secure DevOps Summit & Training 2017
SANS Secure DevOps Summit & Training 2017
SANS Institute
 24 How Threats Are Slipping In the Back Door - SANS ICS Security Summit 2017
How Threats Are Slipping In the Back Door - SANS ICS Security Summit 2017
SANS Institute
 25 SANS Webcast – Continuous Opportunity: DevOps & Security
SANS Webcast – Continuous Opportunity: DevOps & Security
SANS Institute
 26 SANS Cybersecurity Programs for the Department of Defense
SANS Cybersecurity Programs for the Department of Defense
SANS Institute
 27 SANS Pen Test HackFest Summit & Training 2017
SANS Pen Test HackFest Summit & Training 2017
SANS Institute
 28 SANS SIEM & Tactical Analytics Summit & Training
SANS SIEM & Tactical Analytics Summit & Training
SANS Institute
 29 If We’re Doing So Well, Why Are We Still Doing So Poorly? – SANS ICS Security Summit 2017
If We’re Doing So Well, Why Are We Still Doing So Poorly? – SANS ICS Security Summit 2017
SANS Institute
 30 SANS Institute
SANS Institute
SANS Institute
 31 ICS515: ICS Active Defense and Incident Response
ICS515: ICS Active Defense and Incident Response
SANS Institute
 32 SANS Institute
SANS Institute
SANS Institute
 33 Introducing the NEW SANS Pen Test Poster
Introducing the NEW SANS Pen Test Poster
SANS Institute
 34 SANS Institute - An Inside Look at the Newly Updated ICS515 Course
SANS Institute - An Inside Look at the Newly Updated ICS515 Course
SANS Institute
 35 SANS ICS Security Training, Munich, Germany
SANS ICS Security Training, Munich, Germany
SANS Institute
 36 SANS Automotive Summit Webcast
SANS Automotive Summit Webcast
SANS Institute
 37 Privesc Playground - SANS Pen Test HackFest Summit 2017
Privesc Playground - SANS Pen Test HackFest Summit 2017
SANS Institute
 38 Introduction to Reverse Engineering for Penetration Testers – SANS Pen Test HackFest Summit 2017
Introduction to Reverse Engineering for Penetration Testers – SANS Pen Test HackFest Summit 2017
SANS Institute
 39 Honey, Please Don’t Burn Down Your Office: Fun with Smart Home Automation
Honey, Please Don’t Burn Down Your Office: Fun with Smart Home Automation
SANS Institute
 40 SANS Security Operations Summit & Training 2018
SANS Security Operations Summit & Training 2018
SANS Institute
 41 Sh*t Happens! (But You Still Need to Drink the Water) – SANS ICS Summit 2018
Sh*t Happens! (But You Still Need to Drink the Water) – SANS ICS Summit 2018
SANS Institute
 42 ICS Threat Intelligence: Moving from the Unknowns to a Defended Landscape – SANS ICS Summit 2018
ICS Threat Intelligence: Moving from the Unknowns to a Defended Landscape – SANS ICS Summit 2018
SANS Institute
 43 You’re Probably Not Red Teaming (And Usually I’m Not, Either) – SANS ICS Summit 2018
You’re Probably Not Red Teaming (And Usually I’m Not, Either) – SANS ICS Summit 2018
SANS Institute
 44 A Sneak Peak at the New ICS410
A Sneak Peak at the New ICS410
SANS Institute
 45 Jumping Air Gaps – SANS ICS Summit 2018
Jumping Air Gaps – SANS ICS Summit 2018
SANS Institute
 46 Introduction to Linux
Introduction to Linux
SANS Institute
 47 Introduction to Malware Analysis
Introduction to Malware Analysis
SANS Institute
 48 You’re Probably Not Red Teaming (And Usually I’m Not, Either) Webcast by Deviant Ollam
You’re Probably Not Red Teaming (And Usually I’m Not, Either) Webcast by Deviant Ollam
SANS Institute
 49 Hacking your SOEL: SOC Automation and Orchestration – SANS Security Operations Summit 2018
Hacking your SOEL: SOC Automation and Orchestration – SANS Security Operations Summit 2018
SANS Institute
 50 Hunting for Post-Exploitation Stage Attacks with Elastic Stack and the MITRE ATT&CK Framework
Hunting for Post-Exploitation Stage Attacks with Elastic Stack and the MITRE ATT&CK Framework
SANS Institute
 51 Apples and Oranges?: A CompariSIEM – SANS Security Operations Summit 2018
Apples and Oranges?: A CompariSIEM – SANS Security Operations Summit 2018
SANS Institute
 52 SANS Webcast - Perimeter Security and Why it is Obsolete
SANS Webcast - Perimeter Security and Why it is Obsolete
SANS Institute
 53 SANS Webcast - Trust No One: Introducing SEC530: Defensible Security Architecture
SANS Webcast - Trust No One: Introducing SEC530: Defensible Security Architecture
SANS Institute
 54 The Science of Security: The Psychological Impacts of Security Awareness Programs
The Science of Security: The Psychological Impacts of Security Awareness Programs
SANS Institute
 55 How I Pulled Off an Edgy Security Campaign – SANS Security Awareness Summit 2018
How I Pulled Off an Edgy Security Campaign – SANS Security Awareness Summit 2018
SANS Institute
 56 Practical Advice for Submitting to Speak at a Cybersecurity Conference
Practical Advice for Submitting to Speak at a Cybersecurity Conference
SANS Institute
 57 SANS Webcast - Consuming OSINT: Watching You Eat, Drink, and Sleep
SANS Webcast - Consuming OSINT: Watching You Eat, Drink, and Sleep
SANS Institute
 58 SANS Webcast - Zero Trust Architecture
SANS Webcast - Zero Trust Architecture
SANS Institute
 59 SANS STX Cyber Range
SANS STX Cyber Range
SANS Institute
 60 Part 1 – SANS Institute and Tenable talk about cloud security
Part 1 – SANS Institute and Tenable talk about cloud security
SANS Institute

Marin Ivezic provides a step-by-step preparation blueprint for cybersecurity teams to prepare for the quantum threat, focusing on automated crypto inventories, rapid PQC plans, and hybrid stop-gaps. He emphasizes the importance of prioritizing long-lived secrets and aligning board-level risk appetite with forthcoming NIST standards.

Key Takeaways
  1. Conduct automated crypto inventories
  2. Develop rapid PQC plans
  3. Implement hybrid stop-gaps
  4. Prioritize long-lived secrets
  5. Align board-level risk appetite with NIST standards
💡 Manual, interview-driven inventories are insufficient for preparing for the quantum threat, and tool-assisted scans plus targeted deep dives are necessary for accurate and scalable crypto inventorying.

Related Reads

📰
Spotlight: Zishan Ahamed Thandar — The Cybersecurity Expert Strengthening Digital Defenses
Meet Zishan Ahamed Thandar, a cybersecurity expert dedicated to strengthening digital defenses against daily data breaches and exploits
Dev.to · Moonlight
 📰
The Expert You’d Call in a Ransomware Attack Sees Everything. One Sold It to the Gang.
A ransomware negotiator betrayed clients by selling their private info to attackers, highlighting the need for secure and trustworthy cybersecurity practices
Medium · Cybersecurity
 📰
Australia finds serious gaps in Big Tech’s response to child sexual abuse online
Australia's online safety regulator finds Big Tech's response to child sexual abuse online inadequate, citing existing tools not being utilized
The Next Web AI
 📰
The Future of Endpoint Security: Why Visibility, Intelligence, and Automation Will Define the Next…
Learn how visibility, intelligence, and automation will shape the future of endpoint security and why it matters for businesses
Medium · Cybersecurity
Up next
8-Step Cybersecurity Engineer Roadmap 2026 | GenAI Era | #shorts
SCALER
Watch →