Netherlands PQC Migration Handbook (AIVD, CWI, TNO, 2nd Edition 2024)
The Dutch PQC Migration Handbook (AIVD, CWI and TNO, second edition, December 2024): guidance for moving to post-quantum cryptography in three steps. Diagnosis (PQC personas, cryptographic policy, discovery strategy, inventories of cryptographic assets in CBOM form, data and suppliers, and a scored quantum risk assessment), planning (migration manager and budget, cost estimate, maturity model, dependency-ordered technical plan with protection during change) and execution (hybrid combinations and downgrade protection, pre-shared keys under six conditions, recommended algorithms such as ML-KEM-1024 and ML-DSA-87 with classical partners, protocol-by-protocol migration, cryptographic agility, evaluated implementations and priority for PQC over QKD), plus the no-regret moves. 25 recommendation leaves, paraphrased.
Netherlands PQC Migration Handbook (AIVD, CWI, TNO, 2nd Edition 2024) is a compliance framework from Netherlands (guidance usable internationally) with 4 domains and 25 controls that map to 4 other frameworks. The largest domains are Step 1: quantum-vulnerability diagnosis – Netherlands PQC Migration Handbook (AIVD, CWI, TNO, 2nd Edition 2024) (8 controls), Step 3: execution – Netherlands PQC Migration Handbook (AIVD, CWI, TNO, 2nd Edition 2024) (8 controls), Starting position and no-regret moves – Netherlands PQC Migration Handbook (AIVD, CWI, TNO, 2nd Edition 2024) (5 controls). Every control below carries what it requires and what an assessor expects to see.
Framework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.
Framework Domains (4)
Starting position and no-regret moves – Netherlands PQC Migration Handbook (AIVD, CWI, TNO, 2nd Edition 2024)
| Code | Title |
|---|---|
| netherlands-pqc-migration-handbook-aivd-cwi-tno-2nd-edition-2024::BACKUP | Prepare a fallback plan for unexpected developments |
| netherlands-pqc-migration-handbook-aivd-cwi-tno-2nd-edition-2024::MATURITY | Reach and maintain cryptographic management maturity |
| netherlands-pqc-migration-handbook-aivd-cwi-tno-2nd-edition-2024::PEERS | Collaborate with peers and coordinate with dependent organisations |
| netherlands-pqc-migration-handbook-aivd-cwi-tno-2nd-edition-2024::REG | Keep an inventory of regulatory requirements and standards developments |
| netherlands-pqc-migration-handbook-aivd-cwi-tno-2nd-edition-2024::TIMING | Decide when each asset has to move, and start preparing now |
Step 1: quantum-vulnerability diagnosis – Netherlands PQC Migration Handbook (AIVD, CWI, TNO, 2nd Edition 2024)
| Code | Title |
|---|---|
| netherlands-pqc-migration-handbook-aivd-cwi-tno-2nd-edition-2024::DISCOVERY | Define a strategy for cryptographic discovery |
| netherlands-pqc-migration-handbook-aivd-cwi-tno-2nd-edition-2024::INV-CRYPTO | Build and maintain an inventory of cryptographic assets |
| netherlands-pqc-migration-handbook-aivd-cwi-tno-2nd-edition-2024::INV-DATA | Keep an inventory of data assets by type |
| netherlands-pqc-migration-handbook-aivd-cwi-tno-2nd-edition-2024::INV-SUPPLY | Map cryptographic suppliers and dependencies |
| netherlands-pqc-migration-handbook-aivd-cwi-tno-2nd-edition-2024::PERSONA | Determine the organisation's PQC persona conservatively |
| netherlands-pqc-migration-handbook-aivd-cwi-tno-2nd-edition-2024::POLICY | Set and review the cryptographic policy |
| netherlands-pqc-migration-handbook-aivd-cwi-tno-2nd-edition-2024::RISK | Perform a quantum risk assessment and integrate it into risk management |
| netherlands-pqc-migration-handbook-aivd-cwi-tno-2nd-edition-2024::STANCE | Take the action the persona calls for |
Step 2: migration planning – Netherlands PQC Migration Handbook (AIVD, CWI, TNO, 2nd Edition 2024)
| Code | Title |
|---|---|
| netherlands-pqc-migration-handbook-aivd-cwi-tno-2nd-edition-2024::COST | Estimate the cost of the migration |
| netherlands-pqc-migration-handbook-aivd-cwi-tno-2nd-edition-2024::PLAN-MATURITY | Assess PQC maturity against the growth model |
| netherlands-pqc-migration-handbook-aivd-cwi-tno-2nd-edition-2024::PLAN-ORG | Plan the business side of the migration |
| netherlands-pqc-migration-handbook-aivd-cwi-tno-2nd-edition-2024::PLAN-TECH | Plan the technical migration: order, replacement, protection during change, hardware and testing |
Step 3: execution – Netherlands PQC Migration Handbook (AIVD, CWI, TNO, 2nd Edition 2024)
| Code | Title |
|---|---|
| netherlands-pqc-migration-handbook-aivd-cwi-tno-2nd-edition-2024::AGILITY | Build cryptographic agility into technology, processes and policies |
| netherlands-pqc-migration-handbook-aivd-cwi-tno-2nd-edition-2024::EXEC | Execute the migration carefully and keep in-house understanding |
| netherlands-pqc-migration-handbook-aivd-cwi-tno-2nd-edition-2024::HYBRID | Deploy PQC in hybrid combinations and guard against downgrade |
| netherlands-pqc-migration-handbook-aivd-cwi-tno-2nd-edition-2024::IMPL | Use evaluated, production-ready implementations and track implementation weaknesses |
| netherlands-pqc-migration-handbook-aivd-cwi-tno-2nd-edition-2024::PRIMITIVES | Choose the recommended post-quantum and symmetric primitives and parameters |
| netherlands-pqc-migration-handbook-aivd-cwi-tno-2nd-edition-2024::PROTOCOLS | Migrate the common protocols with policies for each |
| netherlands-pqc-migration-handbook-aivd-cwi-tno-2nd-edition-2024::PSK | Use pre-shared symmetric keys only where every condition holds |
| netherlands-pqc-migration-handbook-aivd-cwi-tno-2nd-edition-2024::QKD | Give priority to PQC and do not rely on quantum key distribution |
Your Compliance Coverage
If you comply with Netherlands PQC Migration Handbook (AIVD, CWI, TNO, 2nd Edition 2024), you already cover:
ISO 27002:2022
40%
10 controls mapped
Compare →NSA Guidance for Transition to Quantum-Resistant Cryptography
32%
8 controls mapped
Compare →NIST Post-Quantum Cryptography Standards (FIPS 203, 204, 205)
16%
4 controls mapped
Compare →+ 1 more: Commercial National Security Algorithm Suite (CNSA) 2.0 (8%)
See all 4 mapped frameworks ↓Maps to 4 other frameworks
Coverage is not the same as your position
This page shows what Netherlands PQC Migration Handbook (AIVD, CWI, TNO, 2nd Edition 2024) overlaps with in general. Where your organisation actually stands, against the standard you are going for and the certifications you already hold, is a different question. Same graph and the same recorded refutations, scoped to you rather than to a pair.
The Compliance Position Diagnostic, $5,000 fixed, ten business daysWhat is Netherlands PQC Migration Handbook (AIVD, CWI, TNO, 2nd Edition 2024) and who does it apply to?
Netherlands PQC Migration Handbook (AIVD, CWI, TNO, 2nd Edition 2024) is a compliance framework from Netherlands (guidance usable internationally) with 4 domains and 25 controls. The Dutch PQC Migration Handbook (AIVD, CWI and TNO, second edition, December 2024): guidance for moving to post-quantum cryptography in three steps. Diagnosis (PQC personas, cryptographic policy, discovery strategy, inventories of cryptographic assets in CBOM form, data and suppliers, and a scored quantum risk assessment), planning (migration manager and budget, cost estimate, maturity model, dependency-ordered technical plan with protection during change) and execution (hybrid combinations and downgrade protection, pre-shared keys under six conditions, recommended algorithms such as ML-KEM-1024 and ML-DSA-87 with classical partners, protocol-by-protocol migration, cryptographic agility, evaluated implementations and priority for PQC over QKD), plus the no-regret moves. 25 recommendation leaves, paraphrased. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.
What does Netherlands PQC Migration Handbook (AIVD, CWI, TNO, 2nd Edition 2024) actually require?
Netherlands PQC Migration Handbook (AIVD, CWI, TNO, 2nd Edition 2024) has 25 controls organised across 4 domains. The largest domains are Step 1: quantum-vulnerability diagnosis – Netherlands PQC Migration Handbook (AIVD, CWI, TNO, 2nd Edition 2024) (8 controls), Step 3: execution – Netherlands PQC Migration Handbook (AIVD, CWI, TNO, 2nd Edition 2024) (8 controls), Starting position and no-regret moves – Netherlands PQC Migration Handbook (AIVD, CWI, TNO, 2nd Edition 2024) (5 controls). Each control defines specific requirements that organisations must implement to achieve compliance.
If I already comply with another framework, how much of Netherlands PQC Migration Handbook (AIVD, CWI, TNO, 2nd Edition 2024) do I already cover?
Netherlands PQC Migration Handbook (AIVD, CWI, TNO, 2nd Edition 2024) maps to 4 other compliance frameworks. The top mapping partners are ISO 27002:2022 (40% coverage), NSA Guidance for Transition to Quantum-Resistant Cryptography (32% coverage), NIST Post-Quantum Cryptography Standards (FIPS 203, 204, 205) (16% coverage). Use our comparison tool to explore control-level mappings between frameworks.
How do I implement Netherlands PQC Migration Handbook (AIVD, CWI, TNO, 2nd Edition 2024)?
Start your Netherlands PQC Migration Handbook (AIVD, CWI, TNO, 2nd Edition 2024) compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about Netherlands PQC Migration Handbook (AIVD, CWI, TNO, 2nd Edition 2024) requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 25 controls and track your progress.
Start Your Compliance Journey
Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 723 frameworks.
Get Started Free →Free forever — no credit card required