Author: markjsones
-
Who owns the Post Quantum Cryptography problem?
Back in September 2025, I wrote a blog post about who owns PQC in an organisation. Over a year later, it seems like most organistions still haven’t decided who that is! The supplier ecosystem around PQC has largely agreed that this isn’t an issue to be owned and driven by the CISO. That might sound…
-
A different way to tackle PQC
Post-Quantum Cryptography: Why We Should Start in the Middle Post-quantum cryptography is often presented as a problem of discovery. Find the cryptography. Identify what’s vulnerable. Work out what’s important. Pick a few representative systems. Run a pilot. Prove the technology. Then gradually expand the programme. It is a sensible approach. In fact, much of the…
-
I’ve been busy
There haven’t been any posts for a while. I’ve been busy working on client engagements. First I had a speaking engagement, moderating a panel discussion on Quantum Security at a customer demo day for a fantastic QRNG company. I had a blast and met some great people. Second, I undertook a security assessment for a…
-
Quantum Pushbacks – a living record
This is a living post, that will be updated as and when I hear a new ‘pushback’ as to why an individual feels that they don’t need to engage with Quantum Security Risk. I’m deliberately not going to go back through history and scrape every thought together. I’ll just post them as I come across…
-
The main blockers to action on Quantum Security risk
A simple diagram, which breaks down the key reasons that we see for people failing to engage with a journey towards Quantum Safe. These are good old-fashioned Psychological Barriers, and aren’t technology specific. If you’d benefit from some support to make a start on a plan to tackle Quatum Risk in your organisation, then we…
-
The case for action on Quantum Security risk
A simple diagram, which breaks down the key reasons for action now against Quantum Security risks. If you’d benefit from some support to make a start on a plan to tackle Quatum Risk in your organisation, then we can help. Seek help from the team that’s able to translate your current situation into insight, action…
-
Is anyone truly listening?
I’m not sure anyone is still reading. Linked in feels like it’s died. The algorithm has been tweaked past breaking point. Too many adverts. Too much AI generated crap. Not enough stuff from real people. I for one am fed up looking at it. Others must be too. And the numbers bear that out. Post…
-
Gap 5 – Here are the results… but what do we do next?
The fifth gap we’re going to look at is around prioritising and taking action. Clients tell us that they have so much data and results that it’s almost paralysing. The data should be the key that unlocks their ability to take risk, but instead it simply paints a terrible picture that ends up stalling progress.…
-
Gap 4 – What do your potential customers really think?
The fourth gap we’re going to look at is around customer opinion… and not the usual NPS kind of thing. We’re all familiar with NPS (Net Promoter Score), and the associated customer satisfaction surveys. Oh, and the inevitable link to personal objectives/team scorecards and all that metrics nonsense. Am I the only person who marks…
-
Gap 3 – The AI Hype Gap
The third gap we’re going to look at relates to the AI explosion that we’re all currently ‘enjoying’. I say enjoying, when I probably mean enduring. Sure, there’s some great AI tools and models out there. The technology can do incredible things. But every bit of cyber tooling seems to be claiming it now includes…