Measuring PQC Readiness for PKI: Introducing the PKI Maturity Model Extension Framework and Its First Extension
· 14:00 – 14:25 Amsterdam time · Room C (8)
Most organisations approaching post-quantum migration share the same blind spot: they have a roadmap, but no honest way to measure where their PKI actually stands. This session introduces two published outputs of the PKI Consortium's PKIMM Working Group: the PKI Maturity Model Extension Framework, and the PQC Readiness Extension for PKI built on top of it.
The PKI Maturity Model already helps organisations benchmark their PKI programmes against an industry reference structured around four modules and fifteen capability categories. The Extension Framework defines a standardised way to overlay targeted, fast-moving maturity criteria (PQC, automation, cryptographic agility) onto the existing categories, with consistent scoring, weighting, and reporting rules. The PQC Readiness Extension, authored by Kennedy Nwup, is the first published extension, giving PKI owners a defensible answer to questions their CISOs, regulators and auditors are starting to ask.
In this joint session, Roman Cinkais (Chair, PKIMM WG) and Kennedy Nwup (Vice Chair, PKIMM WG, and author of the extension) walk through the design of the Extension Framework, present the PQC Readiness Extension in detail, show how it is intended to be used in practice, and reflect on turning a working group draft into a published, community-endorsed specification.
Attendees will leave with a published framework and a PQC Readiness Extension they can apply to their PKI programme straight away.
Speakers
- SVP of Enterprise Products · OmniTrust
Roman Cinkais has master degree from mathematical method of information security from Charles University in Prague. Roman has over 15 years of professional experience with a focus on information security IT projects across various industries (financial, retail, banking, telco, postal). Roman has profound knowledge of cyber security and risk management framework, regulation, and standards like GDPR, ISO, NIST, ANSI, PCI, ETSI, Common Criteria, and practical experience with integrated management system minimizing efforts for security controls and compliance.
- Principal Consultant · Afield AB
Kennedy is the founder of Afield AB, an independent consultancy focused on enterprise architecture, AI strategy, and post-quantum cryptography readiness. I advise organizations navigating digital transformation where cryptographic trust is foundational.
Attendance
Open session · first come, first served
Saving interest does not reserve a seat. Admission remains first come, first served.
Save favorite
