Members Only Article

Prescription for Quantum Security: A Cryptographic Bill of Materials

October 2, 2026 | 3 minutes reading time | By David Weldon 

Akin to a Software Bill of Materials, a CBOM is seen as a prerequisite for post-quantum cyber preparedness. It’s hard work, and only a start.

The adage “you can’t manage what you can’t measure” has a cybersecurity analog: You can’t secure what you can’t see. With advanced quantum computing on the horizon, a race is on to take inventory.

At a theoretical but foreseeable moment called Q-Day, quantum systems will be able to break the public key cryptography that safeguards modern communications and commerce.

“For commercial enterprises, a security failure of this magnitude compromises far more than internal infrastructure,” says cybersecurity adviser and author Xander Hamman. “It erodes customer trust, damages brand integrity, and introduces severe operational liability when the validity of digital records, contracts, and software updates can no longer be guaranteed.”

Like others in the field, Hamman believes post-quantum readiness is a matter of urgency, And critical to any organization’s preparations, for visibility into and prioritization of what must be secured, is a Cryptographic Bill of Materials (CBOM).

Xander Hamman

CBOMs effectively move an abstract future concern into the here and now. They provide evidence for risk registers, control assessments, vendor due...

to access this content.

Become a GARP Member to Unlock Exclusive Risk Insights and More!

  • Access timely articles, thought leadership, and an archive of on-demand webcasts, event recordings, and Chapter meeting presentations in our Member Multimedia Library.
  • Get regulatory capital data for global and regional banks in North America, Europe, Asia, and Africa through our Pillar 3+ data analytics platform from the GARP Benchmarking Initiative (GBI®).
  • Gain priority registration to attend any worldwide Chapter meeting for free, as well as preferential rates for GARP events and access to local members-only dinners and professional networking opportunities.
  • Receive comprehensive access via our digital GARP Learning platform to the latest curriculum readings, videos, end of chapter practice questions, and more for the program(s) of which you passed the exam(s).

Topics: Cybersecurity, Resilience

In this article
Share

Related Insights