tech · quantum risk
Is Executive scorecard quantum Quantum Proof? Cyber Program & PQC
Verdict
An executive scorecard translates inventory and pilot metrics into RAG status across identity, network, applications, vendors, and archives. It supports funding—not a claim of being quantum-proof.
Overview
Keep to one page: five domains, owners, next milestone, residual risk. Link to KPIs page for definitions.
Program inventory focus: Executives cannot steer without a simple scorecard. Typical classical surfaces: RAG status across domains. Cross-read /security/program and /assessment. Educational only—not compliance advice.
Cryptographic profile
- Signatures: RAG status across domains
- Hash: N/A
- Public-key exposure: Executives cannot steer without a simple scorecard.
What breaks
- Green-washing without data
- Too many metrics
Mitigations
- Define RAG criteria in writing
- Update quarterly
- Attach evidence links
FAQ
Public scorecard?
Usually internal; regulators may request summaries later.
Related board page?
board-briefing-quantum.