A post-quantum cryptography roadmap for a bank
How a bank could inventory its cryptography, prioritise long-lived data and plan a phased migration to NIST post-quantum standards.
The situation
A regional bank protects payments, customer records and inter-bank links with RSA and elliptic-curve cryptography spread across hundreds of applications, HSMs, VPNs and vendor products. Regulators and the board are asking how the bank will respond to the quantum threat, but nobody has a complete picture of where cryptography is used.
Our approach
Leadership briefing
Explain “harvest now, decrypt later”, NIST’s 2024 standards and realistic timelines to the board, CISO and architecture teams.
Cryptographic inventory
Combine automated discovery (network scans, code and certificate analysis) with application-owner questionnaires to map algorithms, keys and data lifetimes.
Risk prioritisation
Rank systems by data sensitivity and lifetime, internet exposure and difficulty of change.
Crypto-agility design
Define standard libraries, centralised key and certificate management, and patterns that make future algorithm changes configuration-driven.
Roadmap & vendor plan
A phased migration plan aligned to regulatory timelines, plus PQC requirements for HSM, PKI and SaaS vendors.
Typical technology
What success looks like
Metrics we would agree with you up front and track throughout:
- Share of systems with known cryptography
- High-risk systems with a migration plan
- Vendors with a confirmed PQC roadmap
- Systems using centralised crypto libraries
- Hybrid PQC pilots in production
This is an illustrative scenario showing how Inspired Infotech approaches this type of problem. It does not describe a specific client, and actual approach and outcomes depend on each organisation’s systems, data and goals.
Services behind this scenario
Quantum Computing
Quantum readiness, cloud quantum experiments and post-quantum cryptography (PQC) migration.
Learn moreEnterprise AI
AI strategy, platforms, governance and change management to scale AI across the organization.
Learn moreCloud Consulting
Best-in-class cloud services that drive growth, agility and scalability across AWS, Azure and Google Cloud.
Learn moreFacing a similar challenge?
Let’s talk about your situation and what a realistic plan looks like.