https://ucs.h-da.de/author/nils-von-nethen/Nils Von NethenHugo Blox Builder (https://hugoblox.com)en-usSun, 16 Jun 2024 05:02:36 +0000https://ucs.h-da.de/media/logo_hu12465375348167678909.pnghttps://ucs.h-da.de/author/nils-von-nethen/https://ucs.h-da.de/publication/2024-eicc-vonnethen-pmmp/Sun, 16 Jun 2024 05:02:36 +0000https://ucs.h-da.de/publication/2024-eicc-vonnethen-pmmp/<h2 id="abstract">Abstract</h2> <p>Organizations have to plan on migrating to quantum-resilient cryptographic measures, also known as PQC. However, this is a difficult task, and to the best of our knowledge, there is no generalized approach to manage such a complex migration for cryptography used in IT systems that explicitly integrates into organizations’ steering mechanisms and control systems. We present PMMP, a risk-based process for managing the migration of organizations from classic cryptography to PQC and establishing crypto-agility. Having completed the initial design phase, as well as a theoretical evaluation, we now intend to promote PMMP. Practitioners are encouraged to join the effort in order to enable a comprehensive practical evaluation and further development.</p>