tech · quantum risk
Is Tabletop crypto break Quantum Proof? Cyber Program & PQC
Verdict
Tabletop exercises for crypto compromise build muscle memory for both classical breaches and future CRQC-driven emergencies. Run at least one annually for critical trust anchors.
Overview
Scenarios: leaked code-signing key, forced CA distrust, mass VPN cert invalidation, forged SSO assertions.
Include comms, legal, and vendor coordination—not only SOC.
Program inventory focus: Unpracticed rotation takes too long under real stress. Typical classical surfaces: Simulated CA/IdP/code-signing compromise. Cross-read /security/program and /assessment. Educational only—not compliance advice.
Cryptographic profile
- Signatures: Simulated CA/IdP/code-signing compromise
- Hash: Exercise records
- Public-key exposure: Unpracticed rotation takes too long under real stress.
What breaks
- IT-only participants
- No after-action fixes
Mitigations
- Annual exercise
- Track remediation to closure
- Link to IR runbooks
FAQ
Need quantum scenario?
Classical key compromise scenarios already stress the same muscles.
Facilitator?
Internal risk team or external facilitator both work.
Key concepts (technical dictionary)
Terms used on this page — open a definition: