Videos
Your PQC posture, board-ready: scores, trends and posture reports
How security leadership reads post-quantum readiness across a portfolio of applications in Spice Labs.
The portfolio rolls every application into a quantum readiness score and a dependency health score, keeps the history of each score with the reason it moved, and shows each application's share of what is safe, what needs review and what is critical. What to fix next ranks the actions by severity, by how far each one reaches and by the criticality of the applications it touches, with the effort each takes.
Portfolio Posture Reports keep a dated record of where the portfolio stood. A new report is produced whenever the scores change, and each can be viewed or downloaded for a board briefing.
Step by step guides: https://docs.spicelabs.io
Chapters
- 0:00 Introduction
- 0:10 The scores
- 0:22 The trend
- 0:32 Each application's share
- 0:42 What to fix next
- 0:55 Portfolio Posture Reports
- 1:07 Take it to the board
Transcript
0:00 Introduction Leadership needs one answer. How ready is our software for post-quantum cryptography, and is it getting better? Here is how Spice Labs answers it.
0:10 The scores The portfolio rolls every application into two numbers. A quantum readiness score covers the cryptography, and a dependency health score covers the open source underneath it.
0:22 The trend Every score keeps its history. The trend shows each time the score moved, when it happened, and its cause, and the record is never rewritten.
0:32 Each application's share Below the scores, each application's share shows what is safe, what needs review and what is critical, so it is clear where the risk sits.
0:42 What to fix next What to fix next turns that into a plan. Actions are ranked by severity, by how far each one reaches, and by the criticality of the applications it touches, with the effort each one takes.
0:55 Portfolio Posture Reports Portfolio Posture Reports keep a dated record of where the portfolio stood. A new report is produced whenever the scores change, and older ones are kept exactly as published.
1:07 Take it to the board Each report opens in the browser, or downloads as a PDF, a spreadsheet or a slide deck, ready for the next board briefing. Survey your applications, and Spice Labs builds the portfolio, its trend and its reports from there. The guides on docs.spicelabs.io show how.