The Applied Quantum PQC Migration Framework is an open-access, practitioner-grounded methodology for planning and executing enterprise-wide post-quantum cryptography migration. Built from real programs — not theory — it provides the complete lifecycle from securing executive mandate through sustained crypto-agility.

The framework organizes PQC migration into eight phases:

Establishing executive mandate, governance, and multi-year funding.

Cryptographic discovery and building an operationally useful CBOM.

Risk scoring, prioritization, and multi-year roadmap development.

Hybrid pilots, infrastructure modernization, and scaled migration.

Vendor governance and building crypto-agility as a permanent capability.

The framework includes sector-specific extensions for the industries facing the greatest migration complexity:

Financial Services — payments, banking, capital markets, HSM migration, PCI DSS v4.0, and interbank payment complexity.

Telecommunications — 5G-AKA, roaming interfaces, GSMA alignment, lawful intercept, and 3GPP dependencies.

OT & Critical National Infrastructure — 15–25 year equipment lifecycles, safety-case recertification, ICS/SCADA constraints, and gateway-based PQC deployment.

Government & Defense — CNSA 2.0 milestones, NSM-10, FedRAMP/FIPS, and defense industrial base requirements.

Licensed under CC BY 4.0 — free to use, adapt, and share, including for commercial purposes, with attribution to Marin Ivezic and Applied Quantum. The universal framework and all four sector extensions are available as downloadable PDFs.