Black Kite Adds Quantum Readiness Checks for Third-Party Vendors

Insider Brief

• Black Kite has introduced Quantum Readiness controls within its Cyber Rating platform to assess observable signs of post-quantum cryptography readiness across an organization’s third-party vendors.
• The new controls examine indicators such as hybrid post-quantum key exchange, certificate signature readiness and assets without an identified migration path, integrating the results into the platform’s SSL/TLS Strength category.
• The feature is designed to help organizations track vendor readiness, identify potential gaps in supply-chain cryptographic security and prepare for post-quantum migration requirements.

PRESS RELEASE — Black Kite, the leader in third-party cyber risk management, today announced the release of Quantum Readiness, a new set of controls within the SSL/TLS Strength category of the Black Kite Cyber Rating that evaluates quantum agility across an organization’s third-party vendor ecosystem. Quantum Readiness surfaces which vendors are quantum-ready or adopting quantum-safe encryption methods, providing an early indication of security maturity and preparedness for the post-quantum era.

Quantum computers capable of breaking today’s encryption do not exist yet, but experts predict “Q-Day” could arrive as early as 2028. The risk is also retroactive: in “harvest now, decrypt later” attacks, bad actors are already collecting encrypted data to decrypt once quantum computers are powerful enough. Organizations need to prepare now – for many, the shift to quantum-safe encryption is underway, making quantum agility a key indicator of vendor security maturity and readiness.