Executive Replay Available
A briefing for boards, CISOs, risk & counsel
Can You Prove What Encryption
Is in Your Systems?
A briefing for boards, CISOs, risk & counsel — from OMB M-26-15 to commercial CBOMs.
Washington ordered federal agencies off today's encryption. By October 2026 every agency must document where it still uses it. Their vendors get asked for the same proof. Watch the replay to see how to answer with inventory you can defend.
Held Thursday, July 30, 2026
1:00 PM ET
60 min + Q&A
Get RecordingFull 60-minute session + Q&A
Thursday, July 30, 2026 Session
Request the replay and session materials via email.
120 days
Federal PQC plan clock (M-26-15)
Oct 2026
Agency encryption inventory gate
60 min
Live briefing + Q&A
Sources: OMB M-26-15; NIST IR 8547 (Nov 2024). Timeline framing matches public federal guidance — not a prediction of Q-Day.
Leadership Briefing Snapshot
In June 2026, Washington ordered federal agencies off today's encryption. By October 2026 every agency must document where it still uses it. What comes next: their vendors get asked for the same proof. This briefing is for boards, CISOs, risk, and counsel who need defensible encryption inventory before that ask lands.
Deliverable 1
A clear map of what encryption proof means under M-26-15 pressure — inventory depth, not slogans.
Deliverable 2
CBOM-grade evidence patterns leadership and auditors will accept as cryptographic inventory.
Deliverable 3
A 120-day sprint sequence: inventory → prioritization → validation before procurement compresses the window.
Board
Know what proof you will be asked for, residual quantum-era risk, and who owns the inventory answer.
CISO
Prioritize live encryption inventory, HNDL exposure, and evidence that survives audit and procurement review.
Counsel / Risk
Frame vendor and agency asks so legal and risk can defend scope, exclusions, and timelines.
Your Speaker
Vice ChairmanCybersecurity
Eliot Jung
Vice Chairman for Cybersecurity, Defense Innovation Council
Former Executive Director, JPMorgan Chase; Brookhaven National Laboratory cybersecurity specialist.
Expertise in securing critical national infrastructure and financial cryptographic systems against quantum threats.
Doctor of Technology (Purdue); Master in Public Policy (Harvard Kennedy School).
Financial CryptographyCritical InfrastructureQuantum Threats
Agenda
60 minutes of concentrated, actionable content.
0:00 – 8:00Why you are about to be asked for encryption proof
8:00 – 18:00OMB M-26-15: federal clock, commercial ripple
18:00 – 30:00Proving what encryption is in your systems
30:00 – 42:00CBOM, inventory depth, and defensible evidence
42:00 – 52:00Sprint plan: inventory → risk → validation
52:00 – 60:00Q&A with Eliot Jung
What You'll Learn
In 60 minutes, gain the knowledge that takes most security teams months to acquire.
OMB M-26-15 → commercial pressure
What the federal 120-day planning mandate and October 2026 inventory gate mean for vendors, boards, and counsel — not just agencies.
Encryption inventory you can defend
How to prove which algorithms, keys, and long-lived secrets still sit in production systems — and what counts as evidence under audit.
CBOM-grade visibility
Standing up a Cryptographic Bill of Materials that maps runtime exposure, not just a static spreadsheet of libraries.
Harvest Now, Decrypt Later
Why adversaries collecting ciphertext today change retention and migration priority even before a cryptographically relevant quantum computer arrives.
What leadership will ask next
Board, CISO, and counsel questions after M-26-15: proof of inventory, residual risk, and a defensible sprint plan.
Sprint sequencing
How to sequence inventory → prioritization → validation so the first 120 days produce usable evidence, not slideware.
Bonus: QScout Assessment Intake
Attendees can request operator-reviewed QScout assessment scoping for an approved domain.
You leave with:
A clear-eyed read on what Shor’s algorithm actually breaks
HNDL risk timeline mapped to your data retention obligations
PQC transition checklist with assessment and remediation steps
What This Session Is — and What It Is Not
This is not a hype session. It is a grounded assessment of active threats and approaching deadlines.
This is a practical technical briefing on:
Why encryption inventory is now a board-level proof problem under M-26-15
Harvest Now, Decrypt Later: why archived and legacy data is exposed today
Building a Cryptographic Bill of Materials (CBOM) and cryptographic inventory
Post-quantum cryptography migration decision framework
Criteria for when a structured quantum risk assessment is warranted or not
Regulations & Standards Impact
OMB M-26-15 (federal PQC migration)
CNSA 2.0 guidance
CMMC and FIPS 140 requirements
PCI DSS cryptographic governance
NERC CIP
HIPAA data requirements
We also discuss how testing on platforms accessible through IBM Quantum, IonQ, Quantinuum, Rigetti, QuEra, and D-Wave informs feasibility analysis and attack acceleration modeling.
Who Should Attend?
“If you handle sensitive data, regulated information, or mission-critical operations — you need to be here.”
Boards
CISOs
Risk & Counsel
Security Architects
Compliance
Fortune 500
Government
Healthcare
Financial Services
Prove Your Encryption Inventory
Before You Are Asked
Watch the full session on demand and share it with your security, risk, and counsel leads.
Get RecordingYou will receive the replay link and session assets by email.
Want to scope your quantum risk assessment?
Request QScout Assessment →