A briefing for boards, CISOs, risk & counsel
Can You Prove What Encryption
Is in Your Systems?
A briefing for boards, CISOs, risk & counsel — from OMB M-26-15 to commercial CBOMs.
Washington ordered federal agencies off today's encryption. By October 2026 every agency must document where it still uses it. Their vendors get asked for the same proof. Register for the live briefing on how to answer with inventory you can defend.
Event starts in:
Sources: OMB M-26-15; NIST IR 8547 (Nov 2024). Timeline framing matches public federal guidance — not a prediction of Q-Day.
Leadership Briefing Snapshot
In June 2026, Washington ordered federal agencies off today's encryption. By October 2026 every agency must document where it still uses it. What comes next: their vendors get asked for the same proof. This briefing is for boards, CISOs, risk, and counsel who need defensible encryption inventory before that ask lands.
Deliverable 1
A clear map of what encryption proof means under M-26-15 pressure — inventory depth, not slogans.
Deliverable 2
CBOM-grade evidence patterns leadership and auditors will accept as cryptographic inventory.
Deliverable 3
A 120-day sprint sequence: inventory → prioritization → validation before procurement compresses the window.
Board
Know what proof you will be asked for, residual quantum-era risk, and who owns the inventory answer.
CISO
Prioritize live encryption inventory, HNDL exposure, and evidence that survives audit and procurement review.
Counsel / Risk
Frame vendor and agency asks so legal and risk can defend scope, exclusions, and timelines.
Your Speaker
Eliot Jung
Vice Chairman for Cybersecurity, Defense Innovation Council
Former Executive Director, JPMorgan Chase; Brookhaven National Laboratory cybersecurity specialist.
Expertise in securing critical national infrastructure and financial cryptographic systems against quantum threats.
Doctor of Technology (Purdue); Master in Public Policy (Harvard Kennedy School).
Agenda
60 minutes of concentrated, actionable content.
What You'll Learn
In 60 minutes, gain the knowledge that takes most security teams months to acquire.
OMB M-26-15 → commercial pressure
What the federal 120-day planning mandate and October 2026 inventory gate mean for vendors, boards, and counsel — not just agencies.
Encryption inventory you can defend
How to prove which algorithms, keys, and long-lived secrets still sit in production systems — and what counts as evidence under audit.
CBOM-grade visibility
Standing up a Cryptographic Bill of Materials that maps runtime exposure, not just a static spreadsheet of libraries.
Harvest Now, Decrypt Later
Why adversaries collecting ciphertext today change retention and migration priority even before a cryptographically relevant quantum computer arrives.
What leadership will ask next
Board, CISO, and counsel questions after M-26-15: proof of inventory, residual risk, and a defensible sprint plan.
Sprint sequencing
How to sequence inventory → prioritization → validation so the first 120 days produce usable evidence, not slideware.
Bonus: QScout Assessment Intake
Attendees can request operator-reviewed QScout assessment scoping for an approved domain.
You leave with:
What This Session Is — and What It Is Not
This is not a hype session. It is a grounded assessment of active threats and approaching deadlines.
This is a practical technical briefing on:
Regulations & Standards Impact
We also discuss how testing on platforms accessible through IBM Quantum, IonQ, Quantinuum, Rigetti, QuEra, and D-Wave informs feasibility analysis and attack acceleration modeling.
Who Should Attend?
“If you handle sensitive data, regulated information, or mission-critical operations — you need to be here.”
Prove Your Encryption Inventory
Before You Are Asked
The ask is coming. Register for July 30, 2026.
Reserve SeatCan't attend live? Register anyway — we'll send you the recording.
Want to scope your quantum risk assessment?
Request QScout Assessment →July 30, 2026 • 1:00 PM ET
Encryption inventory briefing