# Say Easy, Do Hard - Crypto-Agility - BSW #440 Page: https://stenobird.com/podcast/business-security-weekly-audio-792124/say-easy-do-hard-crypto-agility-bsw-440 Text version: https://stenobird.com/podcast/business-security-weekly-audio-792124/say-easy-do-hard-crypto-agility-bsw-440.md Podcast: [Business Security Weekly (Audio)](https://stenobird.com/podcast/business-security-weekly-audio-792124) Published: 2026-03-25T09:00:00+00:00 Episode link: https://sswaudio.libsyn.com/say-easy-do-hard-crypto-agility-bsw-440 Audio file: https://dts.podtrac.com/redirect.mp3/traffic.libsyn.com/secure/sswaudio/BSW_440_1--0e4d2fcf-540b-4008-bb67-097d3ae43848--audio-converted--0dd2648e-11ec-4d76-b818-d575cae2ff13.mp3?dest-id=406369 Processing state: not_requested JSON: https://stenobird.com/v1/public/podcasts/business-security-weekly-audio-792124/episodes/say-easy-do-hard-crypto-agility-bsw-440 Duration seconds: 3148 ## Resource With Q-day getting closer, regulatory guidance pushing firms to migrate to quantum security in the next five years, and an extensive remediation backlog waiting to be discovered, security leaders must start their quantum security migration today. Easier said than done. In this Say Easy, Do Hard segment, we discuss the quantum-safe journey using a framework for crypto-agility. In part 1, we define cryptographic agility, or crypto-agility for short, and why it's important. Crypto-agility is not just about transitioning to quantum-safe cryptography in the nimblest way possible, and it's not something that can be achieved merely by updating encryption algorithms and protocols. Instead, you need to adapt your organization's cryptographic architecture, automation, and governance to allow for greater control and flexibility. In part 2, we discuss a framework for discovery, prioritization, and remediation while keeping crypto-agility in mind. A quantum-safe journey requires: Inventory of Systems With Non-Quantum-Safe Algorithms And Protocols System Prioritization, Leading To A Migration Roadmap Remediation, Including Vendors And Partners Once a distant possibility, Q-Day is quickly approaching. Are you ready for 2030? Segment Resources: https://pqcc.org/wp-content/uploads/2025/05/PQC-Migration-Roadmap-PQCC-2.pdf https://pqcc.org/wp-content/uploads/2025/06/PQCC-Inventory-Workbook.xlsx https://qramm.org/learn/cryptoscan-guide.html https://research.ibm.com/blog/quantum-safe-cbomkit Visit https://www.securityweekly.com/bsw for all the latest episodes! Show Notes: https://securityweekly.com/bsw-440 ## Actions - request_transcript: `POST https://stenobird.com/v1/public/podcasts/business-security-weekly-audio-792124/episodes/say-easy-do-hard-crypto-agility-bsw-440/transcription-requests` — Idempotently request low-priority transcript generation for this episode. - read_markdown: `GET https://stenobird.com/podcast/business-security-weekly-audio-792124/say-easy-do-hard-crypto-agility-bsw-440.md` — Read the agent-friendly Markdown representation of this episode resource. A page view does not enqueue transcription. Agents should invoke `request_transcript` explicitly when they need this episode processed. ## Transcript Full transcripts are not published on public pages unless there is a clear rights basis.