Industry · MAXIMUM crypto policy
QNSP for Critical Infrastructure
PQC for utilities, energy grids, telecommunications, and transport systems under NIS2 and NERC CIP.
Quantum-safe key management for utilities (electricity/water/gas), energy producers, telecom operators, and transport networks operating under NIS2 (EU), NERC CIP (North America), and equivalent national-security frameworks. Long-cycle equipment, harvest-now-decrypt-later exposure, regulator-grade audit chains.
Threat model
What we're defending against
The HNDL, regulatory, and operational threats specific to this vertical.
OT equipment with multi-decade service life
SCADA controllers, smart-meters, and grid telemetry endpoints deployed today run for 15–25 years. They will face CRQC during their service life — algorithm agility is mandatory.
Nation-state grid-disruption objective
Energy and telecom are top-priority adversary targets. Captured-now command-and-control traffic decrypted on a future quantum platform yields operational blueprints.
IT/OT boundary as the soft target
IT-side compromise → OT command injection is the documented attack chain. QNSP audit chains across the boundary make lateral movement tamper-evident.
Compliance mapping
Frameworks this vertical operates under
QNSP supports continuous evaluation for 7 live frameworks; other named frameworks are architecturally supported with evidence available on request.
| Framework | How QNSP maps |
|---|---|
| NIS2 (EU) | Article 21 risk-management measures specifically including cryptography and incident-handling. Article 23 24-hour incident reporting — QNSP audit-service produces the evidence pack. |
| NERC CIP-005-7 / CIP-007-6 | Electronic Security Perimeter and System Security Management. QNSP edge-gateway PQC-TLS at perimeter; audit-service for log retention. |
| ISO/IEC 27001:2022 ↗ | A.8.24 Use of cryptography across IT and OT estates. |
| MAS TRM (Singapore) ↗ | Applies to Singapore CII operators — see MAS Notices on TRM for critical infrastructure. |
QNSP architecture
Capabilities mapped to this vertical
How QNSP services compose to meet this vertical's needs.
PQC-TLS at the OT/IT Boundary →
Hybrid X25519MLKEM768 termination at edge-gateway between corporate IT and OT systems
Continuous inventory of cryptographic assets across IT + OT — including legacy industrial protocols
7-year audit retention add-on for regulator review of incident timelines
Sovereign control of root keys for nationally significant infrastructure
Outcomes
What deploying QNSP for this vertical delivers
- ✓PQC-TLS termination at every IT/OT boundary — captured traffic is HNDL-safe
- ✓Continuous CBOM inventory across both IT and legacy OT systems
- ✓Tamper-evident incident-evidence packs for NIS2 24-hour reporting
- ✓Sovereign HSM root of trust for nationally significant infrastructure
For your engineers
Build patterns that map to this vertical
When you've evaluated the platform, hand these references to your engineering team.
Next step