A Practical Roadmap to Quantum Readiness | Cyber Resilience 202
A three-phase approach to quantum readiness, from cryptographic inventory to controlled migration.
Future-proofing your cyber risk against quantum computing
Quantum computing won’t break encryption tomorrow, but the shift it represents in cryptography creates long-tail risk for organizations that hold sensitive data today. With “harvest now, decrypt later” tactics and evolving regulatory pressure, waiting to address quantum readiness is no longer a safe option.
This session moves past the hype and focuses on practical, measurable steps organizations can take now to strengthen cryptographic resilience and improve governance visibility. Graeme Manzi, Senior Security Engineer at Resilience, explains what quantum changes and what it doesn’t, and why asymmetric cryptography is the real exposure, especially for data with extended confidentiality requirements.
Attendees get a three-phase readiness model covering inventory, risk reduction, and controlled migration, plus six measurable indicators of quantum readiness, including cryptographic inventory, flexibility, vendor transparency, and strategic planning. Graeme also covers how forward-looking cryptographic governance supports long-term insurability and a stronger renewal narrative.
About Speakers
Graeme Manzi
Senior Security Engineer
Graeme Manzi has extensive experience in cyber security consulting and risk management with a focus on critical national infrastructure and financial services. Prior to his time in consulting, Manzi served as a Royal Marines Commando specialising in secure data communication and received a Commendation while on active Operations. He holds an MSc with distinction in Information Security from Royal Holloway, University of London, and is GIAC & ISACA certified in industrial control system / operational technology security (GICSP) and secure cloud computing architecture and audit (GCLD, GPCS, CCAK)
Any company that sells hardware or software with network connectivity into an EU member state has to report vulnerabilities and incidents affecting that product. The regulation calls these products with digital elements, and it applies to the manufacturer regardless of where the manufacturer is based, so a US firm with no EU presence is covered from the moment its first unit ships into the single market.