This workshop equips government regulators, standards representatives, and procurement leads with the detailed knowledge needed to implement NIST, ETSI, and CNSA 2.0 post-quantum cryptography requirements.
NIST published three post-quantum cryptography standards in August 2024: FIPS 203 (ML-KEM for key encapsulation), FIPS 204 (ML-DSA for digital signatures), and FIPS 205 (SLH-DSA for stateless hash-based signatures). A fourth standard, FIPS 206 (FN-DSA based on NTRU lattices), is in draft. The NSA has updated the CNSA 2.0 suite to mandate ML-KEM-1024 and ML-DSA-87 for national security systems, with a 2025 preference date and 2030 hard requirement. ETSI has published migration strategies (TR 103 619) and is updating its electronic signature suites (TS 119 312) to include PQC algorithms. National agencies including ANSSI and BSI have published their own guidance, which does not always align with NIST.
Government regulators and procurement leads must navigate this multi-layered standards landscape. They need to understand which algorithms are approved for which use cases, where standards diverge between jurisdictions, and how to embed PQC requirements into procurement frameworks and compliance assessments. This workshop covers each standard in technical detail sufficient for writing procurement specifications and compliance requirements, compares the approaches of different standards bodies, and provides practical tools for government PQC standards implementation including model contract language and GovAssure alignment guidance.
Full Day Workshop structure with scheduled breaks. Content is configurable to your government department's procurement frameworks, existing cryptographic estate, and regulatory jurisdiction.
| # | Session | Topics |
|---|---|---|
| 1 | The PQC Standards Landscape for Government What has been finalised, what is in draft, and what is coming | |
| 2 | NIST FIPS 203, 204, 205, and Draft 206 Algorithm specifications, parameter sets, and government procurement implications |
|
| Break, after 50 min | ||
| 3 | ETSI and European Standards Framework ETSI QSC, ANSSI, BSI, and the EU Cybersecurity Act |
|
| 4 | Interactive Demonstration: Standards Compliance Assessment Full-day format only |
|
| Break, after 60 min | ||
| 5 | CNSA 2.0 and Allied Nation Requirements NSA algorithm suite and Five Eyes interoperability |
|
| 6 | Government Procurement and Contract Framework Integration Embedding PQC standards into government buying |
|
| 7 | Q&A and Compliance Planning | |
Workshops are designed and delivered by QSECDEF in collaboration with sector specialists. All facilitators have direct experience in both quantum technologies and government cryptographic standards compliance.
Workshop design and delivery
QSECDEF brings world-leading expertise in post-quantum cryptography, quantum computing strategy, and defence-grade security assessment. Our advisory membership spans 600+ organisations and 1,200+ professionals working at the intersection of quantum technologies and critical infrastructure security.
Domain expertise and compliance validation
Government standards workshops are co-delivered with specialists who have direct experience in NIST, ETSI, and national cryptographic standards bodies. This ensures workshop content reflects current standards interpretation and government procurement practice.
Sessions are configured around your government department's procurement frameworks, existing cryptographic estate, and regulatory jurisdiction. Get in touch to discuss requirements and schedule a date.
Contact Us