Requirement 0223 (Part Four: Technology, section 13.10.2.3 Technology Lifecycle Management; applies to All entities; dated 01 July 2026; new in Release 2026): A post-quantum cryptography transition plan is developed, implemented and maintained. New in Release 2026: a transition plan applying ASD's LATICE framework (locate and inventory traditional asymmetric cryptography, assess business impact, triage, implement, communicate and educate), refined iteratively, towards ceasing traditional asymmetric cryptography by the end of 2030.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.