This workshop equips smart city authorities with practical strategies to secure open data infrastructure against quantum threats while meeting GDPR, NIS2, and PQC procurement requirements.
For city data platform managers and municipal IT security teams. Covers PQC migration for FIWARE NGSI-LD context brokers, TM Forum Open APIs, citizen data portals, and open dataset integrity. Addresses NIS2 Article 21, GDPR Article 32 quantum risk, and PQC procurement clause drafting for local authority IT contracts.
City data platforms sit at the intersection of two quantum risks. First, harvest-now-decrypt-later: citizen personal data (council tax records, housing applications, social services case files) encrypted with RSA-2048 can be captured in transit today and decrypted when a cryptographically relevant quantum computer arrives. Retention periods of 7-25 years for local authority records mean this data must survive the quantum transition. Second, integrity: open datasets published with RSA or ECDSA signatures lose provenance verification once those algorithms are broken. A city publishing transport statistics, air quality measurements, or crime data needs those signatures to remain trustworthy for downstream consumers (researchers, journalists, other government agencies). FIWARE NGSI-LD context brokers use TLS for entity subscriptions and OAuth 2.0 for API authentication. TM Forum Open APIs rely on digital signatures for inter-agency data sharing agreements. Every one of these cryptographic dependencies needs a migration plan. NIS2 Article 21 requires "state of the art" security measures, which will increasingly mean PQC. GDPR Article 32 requires "appropriate technical measures" for personal data protection. This workshop maps every cryptographic dependency in a reference city data platform, prioritises by data sensitivity and retention period, and builds migration plans including PQC procurement clauses for IT contracts.
Full Day Workshop structure with scheduled breaks. Content is configurable to your organisation's technical level and operational environment.
| # | Session | Topics |
|---|---|---|
| 1 | Quantum Threats to Public Data Infrastructure Why harvest-now-decrypt-later targets city open data and citizen portals | |
| 2 | Cryptographic Exposure in City Data Platforms Protocol-level analysis of open data APIs and citizen services |
|
| Break, after 50 min | ||
| 3 | NIS2 and GDPR Obligations for Local Authorities Regulatory requirements driving PQC migration timelines |
|
| 4 | Interactive Demonstration PQC migration assessment for a city data platform |
|
| Break, after 45 min | ||
| 5 | PQC Migration for Open Data Integrity Protecting dataset provenance and API authentication |
|
| 6 | Q&A and Migration Roadmap Review | |
Workshops are designed and delivered by QSECDEF in collaboration with sector specialists. All facilitators have direct experience in both quantum technologies and smart city systems.
Workshop design and delivery
QSECDEF brings world-leading expertise in post-quantum cryptography, quantum computing strategy, and defence-grade security assessment. Our advisory membership spans 600+ organisations and 1,200+ professionals working at the intersection of quantum technologies and critical infrastructure security.
Domain expertise and operational validation
Smart City workshops are co-delivered with sector specialists who bring direct operational experience in smart city organisations. This ensures workshop content is grounded in regulatory, operational, and technical realities specific to the sector.
Sessions are configured around your organisation's technical level, operational environment, and regulatory jurisdiction. Get in touch to discuss requirements and schedule a date.
Contact Us