SERVICES
We offer four engagements and two subscriptions, each covering one or more phases of the LATICE framework from the Australian Signals Directorate (ASD). Our advice is vendor-neutral: driven by what you need, not by any partner program. Where we implement with technology partners, we say so. Engagements are fixed-scope projects with a defined result, and every one includes skills transfer so your team can carry the work forward. Subscriptions keep that result current, with quarterly updates over a 12-month term. You can begin wherever your work already is.
LOCATE · ASSESS · USUAL STARTING POINT
Find where cryptography lives in your systems and in the products and services you buy. Then rank it by two measures: how long your data must stay secret, and how long each system takes to replace.
TRIAGE
Turn the inventory into a prioritised plan that meets ASD’s milestones: a refined plan by the end of 2026, critical systems started by 2028, transition complete by 2030.
IMPLEMENT
Design modular cryptographic layers that separate algorithms from business logic, so you can change them again without rebuilding systems. Then deliver the migration: PKI modernisation, key and certificate lifecycle, and hybrid deployments that run classical and post-quantum algorithms side by side, implemented with our technology partners.
LOCATE · COMMUNICATE AND EDUCATE
Test vendor claims using ASD’s vendor questions and the PKI Consortium’s PQC Maturity Model, starting with the providers that terminate and inspect your traffic, and whether they fall back to classical cryptography without telling you. Write commitments into contracts, and train the people who buy and run technology.
Use ASD’s vendor questions to structure the discussion, PQCMM to test the answers, and the ISM to set the required algorithms.
From Quantum-safe supply chains, November 2026
SUBSCRIPTIONS
LOCATE · ASSESS · 12-MONTH TERM · NO AUTOMATIC RENEWAL
Ongoing monitoring of your internet-facing systems, with no software to install: an initial CBOM and posture assessment, a rescan every quarter, and changes fed into your transition plan. It complements the Readiness Assessment, which looks inside your systems and the products you buy. Data is deleted at the end of the term.
TRIAGE · QUARTERLY
Your transition plan, kept current each quarter against ASD’s milestones. Your board and auditors get a quarterly attestation of progress that separates what is supported, enabled, actually negotiated and enforced. When the ISM, the Protective Security Policy Framework (PSPF), the prudential standards of the Australian Prudential Regulation Authority (APRA) or the Security of Critical Infrastructure (SOCI) Act change materially, we brief you on what it means.
OUR OWN CRYPTOGRAPHY
Before we advise on your cryptography, we account for our own. We keep an inventory and a dated transition plan for our website, email, file storage and any client data we hold, and we share it with clients on request.
WHERE TO START