Insights that help security teams make better decisions.

AI agent key management: a revocable identity per agent, keys kept out of agent processes, and KMS access through an MCP server under policy.

Six practical criteria for choosing a Microsoft 365 Double Key Encryption (DKE) provider: rotation with continuity, Graph provisioning, multi-tenant B2B, ABAC, key custody and operations.

What a CBOM (cryptographic bill of materials) is, the CycloneDX fields, a JSON example, and how to generate one to plan your post-quantum migration.

Enable hybrid post-quantum key exchange (ML-KEM, RFC 9370) on FortiGate IPsec VPNs: FortiOS CLI configuration, testing, and the agentic MCP path with DuoKey.

US federal PQC is no longer inventory-only. EO 14412 and OMB M-26-15 set HVA key establishment by 2030 and signatures by 2031. CNSA 2.0 covers national security systems. Here is who is in scope and what to do first.

The UAE has no single cryptography law either, but a more prescriptive, sector-specific landscape than the EU or UK: NESA's IAS, DESC's ISR v2, CBUAE's brand-new Regulation C 1/2026, the PDPL, and a real national post-quantum migration program launched in 2026.

Switzerland has no PQC statute. What the NCSC, FINMA and the federal PKI expect, who is in scope, the dates that matter and the first steps.

What Commission Implementing Regulation (EU) 2024/2690 actually requires for cryptography and crypto-agility under NIS2, who it applies to, and what it leaves to member states.

BSI TR-02102-1 version 2026-01 names migration dates: classical-only key agreement ends 2031, high-protection systems by 2030, signatures by 2035. Here is who is in scope under BSIG and what to do first.