PQC outcomes and practical milestones
The Learner is the focus. OBA is the constant. Technology is there to serve both.
Choose the outcome that matters to you
You do not need to complete five levels in order. If you already have the experience, you can demonstrate an outcome directly. If you want support, use the relevant PQC resources before attempting the practical exercise.
These are draft pilot evidence specifications, not a certification or an online submission system. Practical reviews and personalised reporting are planned, but are not enabled on this page.
Explain the quantum threat
Explain public-key risks, the uncertainty of quantum timelines and Harvest Now, Decrypt Later to a nontechnical audience.
Example evidence: A concise executive briefing.
Evaluate algorithms and standards
Match key establishment, digital signatures and symmetric encryption to appropriate mechanisms and explain their limits.
Example evidence: A justified technical selection table.
Identify and prioritise cryptographic risk
Discover cryptographic dependencies, identify missing information and prioritise risk.
Example evidence: A risk-ranked cryptographic inventory.
Design a PQC migration
Plan discovery, piloting, interoperability, authentication, rollback and crypto-agility.
Example evidence: A phased migration and testing plan.
Lead organisational PQC readiness
Defend a risk-based investment and governance strategy, including suppliers and residual risk.
Example evidence: A board-level recommendation.
How outcomes are reviewed
Evidence should be evaluated for technical accuracy, risk reasoning, practical applicability, professional judgement and clarity. Reviewers may decide that an outcome has been demonstrated, that further evidence is needed, or that targeted development would help.
A diagnostic quiz can identify knowledge gaps, but a quiz score alone does not establish applied professional capability.