Compliance & Audit / Compliance Checklist
§5.1What this is for: Per-framework PQC compliance checklist seeded from your starred frameworks and assessment.
What a good answer looks like: Every "yes" points at evidence that exists today. A checklist of intentions passes no audit.
Worked example: Pick your industry and primary jurisdiction: each starred framework gets its own checklist with a deadline, a compliance owner and evidence items such as 'Crypto inventory mapped to this framework'.
Runtime and privacy: This planning tool runs in your browser. Use synthetic or approved organizational data and review the site privacy terms before entering sensitive material.
For your role
- Executive / Business Leader
- Enter the industry and primary jurisdiction and star your frameworks on the Compliance page: each starred framework gets a checklist with a deadline and an owner, which is the compliance programme in one view.
- GRC / Risk & Compliance
- Each per-framework checklist carries evidence items such as 'Crypto inventory mapped to this framework' with a compliance owner; complete Scope & context first so exclusions are recorded before the controls are.
Star at least one framework on the Compliance page to add a per-framework control checklist here — the Scope & Context section below still works on its own.
Scope & context
Identify what is in scope for this compliance checklist.
- /assess — compliance frameworks step— Step 5 captures policy + framework registry
- /compliance — framework explorer
- /leaders — stakeholder ecosystem
- /library — policy & governance docs
- NIST CSWP.39-upd1 — Considerations for Achieving Crypto Agility (Dec 2025, upd. Jun 2026)
- NIST IR 8547 — Transition to PQC Standards
- ENISA — Post-Quantum Cryptography Integration Study
- NIST Computer Security Resource Center (Americas)
- NIST News & Events (Americas)
- NSA Media Defense Portal (Americas)
- CISA Quantum Page (Americas)
- BSI Post-Quantum Cryptography (EMEA)
- ANSSI Cryptography Guidelines (EMEA)
Try it
Star a framework on the Compliance page and come back. What does each framework gain here?
Next step
Next in Compliance & Audit: Audit Readiness ChecklistAudit Readiness Checklist is the next Compliance & Audit tool in the Command Center.