Migration Planning / Deployment Playbook
§4What this is for: Generate deployment playbooks with rollback procedures and validation steps.
What a good answer looks like: A colleague could run it at 3am without calling you. That is the only real test of a playbook.
Worked example: Tick 'Configure hybrid classical+PQC mode' and 'Prepare rollback automation scripts' under Pre-Deployment Preparation: the counter reads 2/38, the outlined critical items cannot be skipped, and the saved playbook keeps the checkmarks.
Runtime and privacy: This planning tool runs in your browser. Use synthetic or approved organizational data and review the site privacy terms before entering sensitive material.
For your role
- Executive / Business Leader
- Seven phases from Pre-Deployment Preparation to Rollback Procedures, each a checklist: the test the tool sets is that a colleague could run it at 3am without calling you.
- GRC / Risk & Compliance
- Tick the items as they are done, from feature flags and hybrid mode to Post-Deployment Validation and the Decommission Plan: the .pdf is the change record, with the CSWP.39 §4 methodology cited at the top.
Methodology
Grounded in NIST CSWP.39 §4 — Crypto Agility in System Implementations, which covers how agility is achieved at each layer touched by a rollout: crypto-library APIs, the OS kernel, service mesh, embedded/RTOS, and hardware. The Decommission Plan section below applies §4.6: a crypto gateway restores agility at the network boundary for legacy systems that cannot be modified directly, but the legacy component's own cryptography stays in place — so every gateway entry needs a planned sunset date rather than standing in as the migration itself.
PQC Deployment Playbook
Operational procedures for deploying PQC across production infrastructure — covering hybrid mode, canary testing, progressive rollout, validation, and rollback.
- NIST CMVP — Cryptographic Module Validation
- NIST ACVP — Automated Crypto Validation Protocol
- NIST FIPS 203 — ML-KEM
- NIST FIPS 204 — ML-DSA
- NIST FIPS 205 — SLH-DSA
- Carnegie Mellon CyLab (Americas)
- UC Berkeley BQIC (Americas)
- Ruhr University Bochum Cryptography (EMEA)
- Max Planck Institute Security and Privacy (EMEA)
- Brno University of Technology (EMEA)
- Duke University Quantum Center (Americas)
Try it
What is the tool's only real test of a playbook?
Next step
Next in Migration Planning: Hybrid Transition PlannerHybrid Transition Planner is the next Migration Planning tool in the Command Center.