Quantum-Safe Cryptography for IT Administrators

An eLearning course providing IT administrators and security professionals with a practical understanding of post-quantum cryptography, risk assessment, and migration strategies.

Modern IT systems rely heavily on cryptography to protect fundamental security goals: confidentiality, integrity, authenticity, non-repudiation, and authentication.

However, the development of a Cryptographically Relevant Quantum Computer (CRQC) will break many widely used asymmetric encryption and signature algorithms.

Even though powerful quantum computers are still under development, organizations face immediate risks today from "store-now-decrypt-later" (SNDL) attacks—where encrypted data is intercepted now to be decrypted once quantum hardware matures—and "trust-now-forge-later" (TNFL) risks on digital signatures.

This practical course teaches IT administrators and security personnel how to prepare systems before it is too late, avoiding dangerous "crypto-procrastination". Participants learn to evaluate risks using Mosca's Theorem (x + y > z), conduct crypto-inventories, integrate post-quantum standards like ML-KEM (FIPS 203) and ML-DSA (FIPS 204), implement crypto-agility, and deploy hybrid transition strategies.

Objectives:

Upon completion of the course, you will:

  • Understand the impact of quantum computing on symmetric cryptography, asymmetric algorithms, hashing, and security objectives.
  • Apply Mosca’s Theorem (x + y > z) to determine whether your organization's security term (x) plus migration time (y) exceeds the expected time until quantum collapse (z).
  • Conduct a comprehensive crypto-inventory and quantum risk assessment based on quantum vulnerability, business impact, and migration complexity.
  • Overcome supply chain and dependency challenges across internal policy, business processes, hardware, operating systems, and external vendors.
  • Design a structured migration plan leveraging immediate mitigation steps (such as key rotation, forward secrecy, and air-gapping) alongside hybrid migration approaches (Hybrid AND / Hybrid OR).
  • Master technical post-quantum implementations (optional module) covering TLS 1.3, post-quantum PKI and certificates, Key Encapsulation Mechanisms (KEMs), and stateful hash-based signatures.

Audience:

This course is suitable for

  • IT Administrators & System Managers: Tailored for personnel who manage infrastructure, operating systems, databases, and network components, giving them practical tools to build crypto-inventories and execute migration steps.
  • CISOs & Security Advisors: Essential for security managers and policy advisors responsible for approving budgets, assigning migration roles, conducting risk assessments, and embedding PQC into procurement.
  • IT Architects & System Developers: Highly beneficial for technical leads who configure TLS 1.3, implement post-quantum algorithms, and build crypto-agility into applications and software libraries.

 

All our public courses can also be delivered in-house at your premises either as standard or tailored depending on the needs and requirements of your business; Contact us if you are interested or want to know more.

 

Management Systems Training

In-house training

All training courses provided by DNV can be provided as dedicated session customised to your organization.

Our trainers

At DNV, our trainers are more than subject matter experts - they are passionate, high-quality professionals dedicated to empowering individuals and organizations through knowledge.

APQP4Wind Training

APQP4Wind is the common frame of reference to be used in the industry to strengthen the cooperation between manufacturers and suppliers

Cybersecurity Training

Enable specialists and leaders alike to gain job-specific skills and practical knowledge to protect your company and advance your personal career needs.

Environment and energy training

Public concern on environment and energy issues, stricter environmental legislation and increased media attention put more demands on businesses today

Food safety training

The food and beverage industry is moving to satisfy demands from international consumers and to open new market opportunities

Health and safety training

Your company is expected to care for its employees by managing safety and health in a professional way

Medical devices training

Production of medical devices is a strictly regulated business. In almost all countries, and for most medical products, there are requirements and standards to which manufacturers need to show compliance

Quality & performance training

An effective quality management system in place can improve your company’s quality processes and overall performance and success

Social responsibility training

Ensuring your commitment to safeguard human rights and operate in an ethical, responsible manner is essential to instill ethical practices and promote a culture of corporate sustainability