Preparing for OMB PQC Reporting: A Practical Framework for Federal Agencies

Federal agencies are now required under OMB Memorandum M-23-02 and National Security Memorandum-10 to inventory cryptographic assets, identify quantum-vulnerable algorithms and report progress toward post-quantum cryptography (PQC) readiness. Yet many agencies are unsure what these mandates actually require in practice, how discovery and inventory tools fit into compliance or how to determine whether their current environments provide sufficient cryptographic visibility.

This webinar, hosted by Marion Square, Square Peg Technologies and Carahsoft introduced a structured PQC Reporting & Readiness Enablement Program designed to help agencies understand what OMB expects, how PQC requirements translate into real reporting and evidence and how to evaluate their existing tools and data sources against those requirements.

The session outlined:

• How agencies can use a disciplined assessment approach to identify where discovery, inventory, reporting and governance gaps exist
• How those gaps inform decisions about tooling, budgeting and migration planning