BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//PKI Consortium//Conference Agenda//EN
CALSCALE:GREGORIAN
METHOD:PUBLISH
X-WR-CALNAME:Post-Quantum Cryptography Conference
X-WR-TIMEZONE:Europe/Amsterdam
BEGIN:VEVENT
UID:agenda-fde8a3e2-12c6-4298-8a82-7d4237c6bf2b@ics.pkic.org
SEQUENCE:0
DTSTAMP:20261023T000842Z
DTSTART:20261202T151500Z
DTEND:20261202T155500Z
STATUS:CONFIRMED
SUMMARY:120\,000 Tasks: The Cryptography Was the Easy Part
DESCRIPTION:The integrated master schedule for one large enterprise's post-
 quantum migration grew past 120\,000 discrete tasks. It was not a count of 
 devices\, certificates\, or applications to upgrade. If it were\, 120\,000 
 would be small. The direct remediation work\, the actual cutovers across ev
 ery device and application\, accounted for fewer than 30\,000 tasks (a mill
 ion-plus devices\, systems\, and apps grouped into upgrade batches).\n\nThe
  remaining 90\,000 or so tasks are the enablement system: inventory as a li
 ving capability\, governance and reporting cadence\, vendor lifecycle enfor
 cement\, testing and assurance\, workforce change\, ecosystem and partner a
 lignment\, and ongoing operations during the long hybrid period.\n\nDrawing
  on that 120\,000-task plan (illustrative of complexity\, not a universal c
 ount) and on three decades running high-stakes delivery programs such as na
 tional payments systems and federal health-records platforms\, the talk tur
 ns to what actually governs whether such a program finishes. It is rarely t
 he cryptography. It is the density of interdependencies: vendors waiting on
  internal teams\, shared infrastructure that must be ready before applicati
 on waves can move\, regulatory deadlines colliding with finite engineering 
 capacity. It is ownership\, because cryptography is everyone's problem and 
 therefore no one's\, so the program needs a single accountable lead with au
 thority across security\, IT\, engineering\, procurement\, and OT. It is wo
 rkforce capacity\, since the trained people a program needs at its peak in 
 years four to eight cannot be conjured on demand. And it is funding that ha
 s to survive several budget cycles and more than one CISO. PKI realities si
 t inside this frame: certificate migration planned as waves rather than a s
 ingle flag day\, and PKI and HSM procurement and certification lead times t
 reated as hard scheduling constraints.\n\nAttendees leave able to right-siz
 e and sequence their own program\, separate a credible plan from a wishful 
 timeline\, argue for a single accountable owner and the governance to back 
 one\, build the board case for multi-year funding\, and prioritize by risk 
 so the program delivers measurable security gains in years one to three whi
 le the longer effort runs on.\n\n\nSpeakers: Marin Ivezic
LOCATION:Red hall
CATEGORIES:Red hall
URL:https://pkic.org/events/2026/pqc-conference-amsterdam-nl/agenda/
END:VEVENT
END:VCALENDAR