Proving Post-Quantum Readiness to the Market
Terms like quantum-ready and quantum-safe are ambiguous. The PQC Maturity Model (PQCMM) provides a standardized language for you to communicate the maturity of your products to your customers and downstream supply chain.
The PQCMM is product and service-centric. You do not assess your entire organization at once; you assess specific products, services, and deployment configurations.
Assessment Paths
The model supports three progressive validation methods depending on your market, regulatory environment, and customer demands:
- Self-Assessment — An internal gap analysis (often the starting point) used to structure your roadmap and answer baseline supplier questionnaires. Start with a self-assessment to identify gaps against Level 1 through Level 5 criteria.
- Third-Party Assessment — An objective, evidence-backed evaluation by an independent assessor. Recommended for material suppliers to large enterprises.
- PKI Consortium Certification — Authoritative recognition reviewed by the PKI Consortium. Required for critical infrastructure, government applications, and high-assurance trust ecosystems.
Resources
- PQCMM Level Criteria — The exact requirements, checklists, and evidence expectations for Levels 0 through 5.
- Accredited Assessors — The directory of approved independent assessors and the starting accreditation criteria.
- Brand and Mark Usage Guidelines — How certified vendors may display the PKI Consortium PQCMM certification mark.
