Question

A financial services company is preparing for post-quantum cryptography migration. Leadership asks the security engineering team to first understand where and how cryptography is used across thousands of applications, libraries, and hardware devices before selecting replacement algorithms. Which action best positions the organization to prioritize migration and achieve crypto-agility?

Accepted Answer

Generate a cryptographic bill of materials (CBOM) that inventories algorithms, key sizes, protocols, and their locations across systems

Answer

Immediately replace all RSA-2048 certificates with ML-KEM (Kyber) hybrid certificates across the environment

Answer

Increase all symmetric AES keys to 256-bit and consider the migration complete

Answer

Deploy a network intrusion detection system tuned to flag quantum-based attack signatures