Risk & Strategy / Board Pitch Builder
§5What this is for: Build board-ready investment proposals with executive summary and budget request.
What a good answer looks like: One ask, one date, one consequence of missing it. If the deck needs a second slide to explain the ask, the ask is not clear enough yet.
Worked example: Run the ROI Calculator first, then open the pitch: the Budget Request field pre-fills with that investment, the Cost-Benefit section quotes the payback in months, and the export is a numbered proposal with a Basis of figures footer.
Runtime and privacy: This planning tool runs in your browser. Use synthetic or approved organizational data and review the site privacy terms before entering sensitive material.
For your role
- Executive / Business Leader
- Fill the Executive Summary, Harvest-Now Risks, Migration Timeline and Budget Request sections in Edit, then Preview: one ask, one date, one consequence of missing it is the test the tool sets for the deck.
- GRC / Risk & Compliance
- The Risk Assessment Summary, Governance Structure and Peer Benchmark sections are where the compliance position goes; the Recommended Actions section is what the board is asked to approve and later hold the programme to.
No role selected — showing the Executive / Board (default) variant.
Objective: Secure budget approval, executive sponsorship, and a named governance charter.
Pick your role to tailor the pitch for Executive, Developer, Architect, or Operations audiences.
PQC Migration Investment Proposal
Every section is pre-populated from your assessment data. Edit any field inline, switch to Preview to see the formatted document, then export as Markdown or PPTX.
Executive Summary
One-paragraph board-level framing of why PQC migration is needed now.
Risk Overview
Quantified risk posture including any situational boosts that raised the score.
Quantum Urgency - HNDL / HNFL
Time-bound risks: long-retention data (HNDL) and long-lived signing credentials (HNFL).
Crypto Inventory - Summary
High-level view of what classical crypto is in scope.
Proposed Timeline
Phased migration aligned to regulatory deadline.
Cost-Benefit Analysis
Migration cost vs. cost of inaction. Refine with the ROI Calculator (Step 2).
Requested Budget
Total investment requested. Ranges are illustrative - scope with Finance.
Governance & Ownership
Sponsor, RACI, and reporting cadence.
Peer Benchmark
Where peers stand under the same regulatory frameworks.
Recommended Actions
Top prioritized next steps - tailored for executive framing.
How this pitch is built
Budget band: a base range keyed to your assessment risk level — Low/ Moderate: $0.5M-$1.5M over 18-24 months; High: $1M-$3M over 24 months; Critical: $2M-$6M over 24-36 months.
Scale multiplier: the band is then scaled by products in scope — ×1.5 at 200+ products, ×1.2 at 50+, ×0.7 under 10, ×1 otherwise.
Cost-of-inaction multiplier: the Cost-Benefit section frames inaction (penalties, breach response, contract loss, reputational damage) as an illustrative 3-5× the migration investment for critical/high risk, or 2-3× for moderate/low risk.
Both figures are starting points for board discussion, not a quote — run the ROI Calculator (Step 2 of this workshop) for organization-specific numbers before committing to a budget ask.
- /assess — compliance frameworks step— Step 5 captures policy + framework registry
- /compliance — framework explorer
- /leaders — stakeholder ecosystem
- /library — policy & governance docs
- NIST CSWP.39-upd1 — Considerations for Achieving Crypto Agility (Dec 2025, upd. Jun 2026)
- NIST IR 8547 — Transition to PQC Standards
- ENISA — Post-Quantum Cryptography Integration Study
- NIST Computer Security Resource Center (Americas)
- NIST News & Events (Americas)
- NSA Media Defense Portal (Americas)
- CISA Quantum Page (Americas)
- BSI Post-Quantum Cryptography (EMEA)
- ANSSI Cryptography Guidelines (EMEA)
Try it
Which three things does the tool say a board deck needs on one slide?
Next step
Next in Risk & Strategy: Breach Scenario SimulatorBreach Scenario Simulator is the next Risk & Strategy tool in the Command Center.