Command Center
Your PQC readiness command center, organised around the NIST CSWP.39 Fig 3 Crypto Agility Strategic Plan (Considerations for Achieving Crypto Agility, Dec 2025, updated June 2026).
Your PQC readiness command center, organised around the NIST CSWP.39 Fig 3 Crypto Agility Strategic Plan (Considerations for Achieving Crypto Agility, Dec 2025, updated June 2026).
What this means for you
- Executive / Business Leader
- Start with the four board questions — What's at risk? What's the deadline? What will it cost? Who owns it? — each opens a tool; once you have artifacts, the Governance zone leads with the Board Deck, ROI Model and Audit Checklist cards.
- GRC / Risk & Compliance
- Your lens opens on the Governance zone with the Audit Checklist, Policy Draft and Vendor Scorecard cards first, then Risk Register and Risk Treatment Plan under Data-Centric Risk Management; the Zones rail on the left switches between them.
- Developer / Engineer
- Your lens opens on the Migration zone with the Migration Roadmap card, the Deployment Playbook under Mitigation; "NIST CSWP.39 — by document section" above the plan jumps by section, and "Export ZIP" bundles every artifact as Markdown.
- Security Architect
- The "Architecture pack" panel at the top holds your scope, decision records and test plan, and downloads them with your saved architecture artifacts as one document that lists what is still missing; the Migration zone holds the Hybrid Transition Plan and MTI Recommendation.
- Researcher / Academic
- Your lens opens on Data-Centric Risk Management with the Risk Register and Risk Treatment Plan cards; "NIST CSWP.39 — by document section" lists the plan by section, and the accordion at the bottom quotes NIST CSWP 39's definition.
- Certification & Validation Engineer
- The Command Center plans a migration programme, which this role does not run; the Vendor Scorecard is the tool that touches certificates — a supplier's claims scored against what they can prove.
- IT Ops / DevOps
- Your lens opens on the Migration zone with the Migration Roadmap card first, the Deployment Playbook under Mitigation and the KPI Tracker under Data-Centric Risk Management; "Your next steps" at the top ranks what to do next.
- Curious Explorer
- This page is a worked example of a migration programme; a banner names the roles it is built for, and the "How does NIST CSWP 39 define crypto agility?" accordion at the bottom is the plain definition to start from.
Welcome to your PQC Command Center
A post-quantum migration is a program, and every program answers the same four board-level questions. Start with whichever you need first.
What's at risk?
Size your quantum exposure by system and data sensitivity.
Run risk assessment →What's the deadline?
See the mandates and dates that apply to your sector and region.
Compliance deadlines →What will it cost?
Model the budget, ROI, and the cost of waiting.
ROI calculator →Who owns it?
Assign accountability and set the governance model.
RACI builder →Start with these tools
ROI Calculator
Calculate migration ROI with breach avoidance, compliance savings, and payback period
Risk Register Builder
Build a PQC risk register with current algorithm, threat vector, likelihood, impact and mitigation
RACI Builder
Build RACI matrices for 10 PQC activities across 6 organizational roles
Try it
- 1. Predict before you run it.
- 2. Run or change the tool above.
- 3. Explain what the result shows.
The Command Center frames a PQC programme as four board-level questions. Which one does a RACI chart answer?
Related content
Next step
Start with Initial ScopingInitial Scoping sizes the programme before any other tool asks for detail.