Workshop Description
Digital media organisations face quantum risk across four domains simultaneously: content protection (DRM systems relying on RSA and ECC), audience data (first-party data stores protected by classical encryption), delivery infrastructure (CDN TLS termination handling millions of connections), and emerging computing applications (quantum ML for recommendation, quantum optimisation for advertising). Each domain has a different threat timeline, different regulatory exposure, and different investment profile. Leadership teams need a structured framework for sequencing investment across these domains.
This briefing provides that framework without requiring cryptographic expertise. We cover the regulatory obligations that create board-level accountability (NIS2 Directive for essential service operators, EU Cyber Resilience Act for connected products, Ofcom security requirements), the competitive dynamics (first-movers in PQC migration gain procurement advantage with studios and platform partners), and the investment sequencing logic (which migrations are urgent, which can wait, and which quantum computing applications warrant monitoring versus active investment). Participants leave with a decision framework, not a technical migration plan.
What participants cover
- Quantum risk exposure mapping across the four digital media domains: content protection, audience data, delivery infrastructure, and quantum computing applications
- Regulatory accountability: NIS2 Directive essential service obligations, EU Cyber Resilience Act product security requirements, and Ofcom security duties for streaming platform operators
- Investment sequencing framework: distinguishing urgent PQC migrations (harvest-now-decrypt-later exposure) from monitored-only quantum computing applications
- Competitive dynamics: how PQC readiness affects studio content licensing negotiations, platform partnerships, and advertiser data protection commitments
- Board governance: translating quantum risk into risk register language, setting migration budget expectations, and defining executive accountability for PQC transition
- Vendor landscape: assessing CDN provider (Cloudflare, Akamai, Fastly) PQC readiness, DRM vendor migration timelines, and cloud provider quantum security roadmaps