About the PQC Migration Framework

The Applied Quantum PQC Migration Framework is an open-access, practitioner-grounded methodology for planning and executing enterprise-wide post-quantum cryptography migration. It was developed by Marin Ivezic and published by Applied Quantum.

The framework is not a theoretical exercise. It was built from direct experience leading real PQC migration programs, including programs generating up to 120,000 tasks in a single enterprise’s integrated master schedule. Of those, approximately 30,000 were direct cryptographic upgrade tasks, each addressing buckets of cryptographic functions numbering in the millions. The other 90,000 were enterprise enablement work: governance, vendor engagement, training, policy, infrastructure modernization, testing, and operational integration. That 1:3 ratio of direct-crypto-to-enablement tasks is one of the framework’s key insights, and one of the reasons PQC migration is far more complex than most organizations anticipate.

The framework provides the complete 8-phase lifecycle from securing executive mandate through sustained crypto-agility, with cross-cutting foundations covering maturity assessment, metrics, regulatory mapping, team structure, SOC implementation (detection, incident response, quantum CTI), and GRC implementation (cascading KRIs, risk appetite, regulatory intelligence, audit). Six sector-specific extensions adapt the methodology for financial services, payments, telecommunications, critical infrastructure / OT, government & defense, and digital assets.