Current Version: 1.0.0
PQCMM Version 1.0.0 - Initial Public Release
Released: May 8, 2026
This is the initial public release of the PQC Maturity Model (PQCMM), establishing the core six-level framework (Levels 0 through 5) and the foundational criteria for supply chain risk management.
Key introductions in this version:
- Defined the product-centric scope (separating it from the organizational PKI Maturity Model).
- Established the distinction between Self-Assessment, Third-Party Assessment, and PKIC Certification.
- Introduced the concept of a state of perpetual readiness, moving away from a one-time migration mindset.
- Provided initial playbooks and evaluation criteria for procurement teams.
Revision Log
- Release 1.0.0 (May 2026): Official version 1.0.0 release of the model.
- Draft 1 (October 2025): Initial working group draft published for community review.
Participate in the ongoing evolution of the model by joining the PKI Consortium discussions.
Conducting Assessments
Important: All assessments (Self-Assessments, Third-Party Assessments, and PKIC Certifications) must explicitly state the version of the PQCMM evaluated against. Assessments should always take place on the latest available version to ensure alignment with current cryptographic standards and best practices.
View Full Content Changes: The entirety of the PQCMM is managed openly. To view the exact line-by-line differences (diffs) of any revision, refer to the commit history in our GitHub repository.
