EPC 342 - 08 v16.0.1 - Issued 24 June 2026 SITG-Consulting Review & Dissection A MUST READ FOR ANY EUROPEAN PAYMENT PROVIDER The European Payments Council has released #EPC342‑08v16.0.1, its 2026 update on cryptographic algorithm usage and key‑management practices. This deck provides SITG-Consulting independent review and dissection of the document - what it gets right, where it stops, and the enterprise‑level gaps it leaves unaddressed. Necessary, but not sufficient. This is

July 12, 2026 The quantum threat isn't coming. It is already in your infrastructure. PQC Discovery and PQC Posture Management are maturing fast, but neither can deliver a governed, evidence-driven transformation. The missing capability is Transition Orchestration: the programme architecture that validates and proves every cryptographic decision. If your organization cannot prove every decision it makes, it does not control its cryptographic estate. It merely tracks it. Hard T

FINMA's new guidance on Quantum Computing is welcome. It sends an important signal. Quantum risk is no longer a theoretical technology discussion. It is a governance and operational resilience issue that financial institutions are expected to address now. I agree with the direction of travel. Board-approved strategies, risk analysis, cryptographic inventories, crypto-agility and supplier management all deserve attention. However, I was struck by how extraordinarily light the

🚨 BREAKING: Quantum Just Got Secure-by-Design - And Silicon Is Moving First The last 24 hours in PQC and quantum have been louder than anyone expected. 💥 Europe may have just fired the starting gun on secure-by-design quantum hardware. 🇪🇺 SEALSQ and Quobly signed a $5M deal to embed post-quantum cryptography directly into Quobly’s silicon quantum processors. 🤝 Not PQC at the application layer. ❌ Not PQC wrapped around the cloud. ☁️ PQC integrated into the cryogenic contr

The last 24 hours in PQC and quantum have been louder than anyone expected. 💥 Europe may have just fired the starting gun on secure-by-design quantum hardware. 🇪🇺 SEALSQ and Quobly signed a $5M deal to embed post-quantum cryptography directly into Quobly’s silicon quantum processors. 🤝 Not PQC at the application layer. ❌ Not PQC wrapped around the cloud. ☁️ PQC integrated into the cryogenic control electronics themselves. 🧊 We’re talking about Cryo-CMOS ASICs with PQC ac

PQC Economics For the past three years, almost every serious discussion about Post-Quantum Cryptography has started with the same question: How much will it cost? Governments have published rough estimates. Boards want numbers. Vendors are selling calculators. Consultants are packaging migration roadmaps. But that question is still too narrow. It treats PQC like a software upgrade. It is not. The economics of PQC are not driven by cryptographic algorithms. They are driven by

In today’s fast-evolving landscape, organizations face unprecedented challenges. Cyber threats grow more sophisticated. Quantum computing promises disruption. Regulatory demands tighten. SITG Consulting crafts solutions that anticipate these shifts. The focus remains clear: build resilience, ensure compliance, and enable sustainable transformation. This approach positions SITG Consulting as a trusted partner for global enterprises, financial services, critical infrastructure,

𝐃𝐨 𝐨𝐫𝐠𝐚𝐧𝐢𝐬𝐚𝐭𝐢𝐨𝐧𝐬 𝐫𝐞𝐚𝐥𝐥𝐲 𝐧𝐞𝐞𝐝 𝐚 𝐬𝐭𝐚𝐧𝐝𝐚𝐥𝐨𝐧𝐞 𝐂𝐫𝐲𝐩𝐭𝐨𝐠𝐫𝐚𝐩𝐡𝐲 𝐏𝐨𝐥𝐢𝐜𝐲? I’m starting to think the default answer of “yes” might be wrong. I recently reviewed the Dutch Government’s Framework Cryptography Policy for the Central Government. What’s interesting is that it doesn’t push organisations to create yet another standalone document. Instead, it recognises that cryptographic governance can - and often should - be embedded across

Organisations are investing billions in digital transformation, artificial intelligence, cloud migration and cybersecurity. Yet many programmes fail for one simple reason. Technology changes faster than governance, risk management and organisational control. At SITG-Consulting, we help organisations bridge that gap. We specialise in business transformation, cyber resilience, enterprise governance, post-quantum cryptography (PQC), quantum risk management, regulatory compliance

The Missing Discipline The post-quantum conversation has a numbers problem. Vendors love to say they have found millions of cryptographic assets. That sounds serious. It sounds comprehensive. It sounds like the sort of number a board should pay attention to. But in most environments, that number is doing a lot of rhetorical work. What organisations usually have are millions of cryptographic instances. The same library. The same certificate. The same key store. The same implem

𝐏𝐐𝐂 𝐝𝐢𝐬𝐜𝐨𝐯𝐞𝐫𝐲 𝐚𝐧𝐝 𝐫𝐞𝐦𝐞𝐝𝐢𝐚𝐭𝐢𝐨𝐧 𝐯𝐞𝐧𝐝𝐨𝐫𝐬 𝐥𝐨𝐯𝐞 𝐭𝐞𝐥𝐥𝐢𝐧𝐠 𝐨𝐫𝐠𝐚𝐧𝐢𝐬𝐚𝐭𝐢𝐨𝐧𝐬 𝐭𝐡𝐞𝐲 𝐡𝐚𝐯𝐞 "𝐦𝐢𝐥𝐥𝐢𝐨𝐧𝐬 𝐨𝐟 𝐜𝐫𝐲𝐩𝐭𝐨𝐠𝐫𝐚𝐩𝐡𝐢𝐜 𝐚𝐬𝐬𝐞𝐭𝐬." That sounds impressive. In reality, it frequently conflates cryptographic #instances with unique cryptographic #dependencies. There is a fundamental difference. The same cryptographic library, certificate, key store, or implementation can appear thousands of times across ser

One of the questions we're asked more than any other is: "What actually happens during a Discovery Sprint?" This carousel answers that question. Rather than talking about methodology, we've opened the lid on a real engagement for an anonymised digital challenger bank. You'll see how assumptions are tested, how evidence is gathered, why cryptographic inventories rarely reconcile, and how governance failures become visible long before any discussion about post-quantum algorithm

July 7, 2026 The week that followed the two US executive orders resolved into a single structural pattern: the migration mandate is now propagating outward from government into the vendor base and the capital markets. The signals divide cleanly. On the governance side, the largest cloud provider brought its own quantum-safe deadline forward by two years and folded it into an existing engineering discipline, and a zero-knowledge protocol published a phased cryptographic transi

The Mid-Year Global Intelligence Review Special Edition | January – June 2026 About this Special Edition This special edition departs from the normal weekly format. Rather than examining a single seven-day reporting window, it assesses the cumulative developments that shaped the first half of 2026 across quantum computing, post-quantum cryptography (PQC), standards, regulation, government policy, commercial adoption, and enterprise readiness. The objective is not to report ev

Every year organisations invest billions in business transformation. Digital transformation. Cloud migration. Cybersecurity. Operational resilience. Artificial Intelligence. Post-Quantum Cryptography. The strategies are ambitious. The technology is impressive. The budgets are substantial. Yet programme after programme fails to deliver the expected outcomes. Why? The answer is surprisingly consistent. Organisations rarely fail because they lack strategy. They fail because they

The First Step Towards Post-Quantum Readiness Most organisations understand that quantum computing will eventually require a transition to post-quantum cryptography (PQC). Far fewer know where to begin. The greatest challenge is rarely selecting new cryptographic algorithms. It is understanding where cryptography exists across the organisation, how it is being used, what business processes depend upon it, and which assets are most exposed to future quantum risk. Our Post-Quan

Successful transformation is not about deploying the latest technology. It is about changing how an organisation operates, governs risk, makes decisions and delivers measurable business outcomes. At SITG-Consulting, we help organisations design and execute complex transformation programmes that strengthen governance, improve operational resilience and prepare businesses for emerging technological and regulatory challenges. Our expertise spans business transformation, digital

The Tipping Point: How Quantum Korea 2026 Exposes the Industry’s Reality and Its Fault Lines Quantum Korea 2026, held from July 2 to July 4 at DDP Art Hall in Seoul, is not just another conference on the international technology circuit. It is a geopolitical signal, a commercial barometer, and a diagnostic event that shows exactly where the quantum industry is advancing, where it is stalling, and where the rhetoric still exceeds the reality. Under the banner “Quantum in Actio

#PQC and #Data: The Three #Cryptographic Domains Post-quantum risk is about the data being protected, not the algorithms themselves. Every cryptographic dependency maps to one of three data states. If you do not know which state you are protecting, you do not know what you are securing. #Data in #Motion Information moving across networks or channels. TLS sessions, VPN tunnels, 5G key agreement, SWIFT messages, API calls. Quantum relevance: interception and harvest. If the con

𝐈'𝐕𝐄 𝐃𝐈𝐒𝐂𝐎𝐕𝐄𝐑𝐄𝐃 𝐖𝐇𝐀𝐓 𝐀𝐈 𝐆𝐎𝐕𝐄𝐑𝐍𝐀𝐍𝐂𝐄 𝐑𝐄𝐀𝐋𝐋𝐘 𝐈𝐒. Codswallop. Absolute codswallop. - NO YOU HAVE NOT 𝐀𝐈 𝐡𝐚𝐬𝐧'𝐭 𝐞𝐱𝐩𝐨𝐬𝐞𝐝 𝐚 𝐠𝐨𝐯𝐞𝐫𝐧𝐚𝐧𝐜𝐞 𝐠𝐚𝐩. 𝐈𝐭'𝐬 𝐞𝐱𝐩𝐨𝐬𝐞𝐝 𝐚 𝐤𝐧𝐨𝐰𝐥𝐞𝐝𝐠𝐞 𝐠𝐚𝐩. 𝐈'𝐯𝐞 𝐛𝐞𝐞𝐧 𝐠𝐨𝐛𝐬𝐦𝐚𝐜𝐤𝐞𝐝 𝐛𝐲 𝐡𝐨𝐰 𝐦𝐚𝐧𝐲 𝐩𝐞𝐨𝐩𝐥𝐞 𝐢𝐧 𝐜𝐲𝐛𝐞𝐫, 𝐫𝐞𝐬𝐢𝐥𝐢𝐞𝐧𝐜𝐞, 𝐫𝐢𝐬𝐤 𝐚𝐧𝐝 𝐜𝐨𝐦𝐩𝐥𝐢𝐚𝐧𝐜𝐞 𝐬𝐭𝐢𝐥𝐥 𝐝𝐨𝐧'𝐭 𝐮𝐧𝐝𝐞𝐫𝐬𝐭𝐚𝐧𝐝 𝐰𝐡𝐚𝐭 𝐠𝐨𝐯𝐞𝐫𝐧𝐚𝐧𝐜𝐞 𝐢𝐬. Eve