Cloud Security · Sub-category
SBOM, SCA, SLSA, post-quantum readiness, and the long-tail controls that separate organisations with a supply chain programme from those that have a compliance checkbox.
Post-quantum cryptography is no longer optional. A practical 2026 roadmap for enterprise PQC migration: crypto inventory, agility, NIST algorithms, and a realistic timeline.
Software supply chain security in 2026: SBOM generation, SCA tooling, the SLSA framework, the EU CRA deadline, and why the XZ Utils backdoor changed open source assumptions.