BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//PKI Consortium//Conference Agenda//EN
CALSCALE:GREGORIAN
METHOD:PUBLISH
X-WR-CALNAME:Post-Quantum Cryptography Conference
X-WR-TIMEZONE:Europe/Amsterdam
BEGIN:VEVENT
UID:agenda-da50765b-b27f-4e76-a760-9c4eea88f67e@ics.pkic.org
SEQUENCE:0
DTSTAMP:20261023T000842Z
DTSTART:20261203T094500Z
DTEND:20261203T104000Z
STATUS:CONFIRMED
SUMMARY:Beyond Discovery: Making Cryptographic Inventory Actionable
DESCRIPTION:PQC roadmaps and guidance\, including the EU’s coordinated im
 plementation roadmap and guidance from CISA\, NSA\, NIST\, and the UK NCSC\
 , emphasize discovery and inventory as foundations for migration. With seve
 ral years of guidance and growing practical experience\, what have organiza
 tions learned? Where is discovery enabling progress\, and where does it ris
 k becoming an exercise with no clear endpoint?\n\nThis panel examines how t
 hat guidance translates into practice and what cryptographic posture manage
 ment requires beyond collecting findings.\n\nThe first question is scope: w
 here does broad\, exhaustive scanning add value\, and where does it generat
 e noise that slows everyone down? How should organizations decide where to 
 point discovery tools first\, when to expand coverage\, and how to account 
 for what remains outside scope?\n\nThe second is context. Software is updat
 ed\, dependencies change\, keys and certificates rotate\, and cryptographic
  configurations evolve. An inventory can therefore become outdated quickly.
  How current does that view need to be\, what context matters\, and what do
 es it take to maintain it?\n\nThe third is ownership. Cryptographic assets 
 rarely belong to a single team\, and their dependencies often extend into t
 he supply chain. How should responsibility be divided among security teams\
 , application owners\, and suppliers\, particularly when the organization i
 dentifying a risk cannot directly address it?\n\nThe fourth is what happens
  after the scan. Discovery tools can generate large volumes of findings\, a
 nd a report nobody acts on is worth little. What determines which findings 
 deserve attention\, who should act\, and whether the response has achieved 
 its purpose?\n\nPanelists will discuss what has worked\, what has not\, and
  where experience suggests that tooling\, processes\, or guidance need to e
 volve.\n\nSpeakers: Chris Hickman *\, Alexander Loew\, Itan Barmes\, Paul v
 an Brouwershaven
LOCATION:Red hall
CATEGORIES:Red hall
URL:https://pkic.org/events/2026/pqc-conference-amsterdam-nl/agenda/
END:VEVENT
END:VCALENDAR