<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin-top:0in;
margin-right:0in;
margin-bottom:8.0pt;
margin-left:0in;
line-height:105%;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:40908807;
mso-list-template-ids:1339296798;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1
{mso-list-id:835655222;
mso-list-template-ids:1859933602;}
@list l1:level1
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l1:level3
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level4
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level5
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level6
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level7
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level8
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level9
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2
{mso-list-id:1463117047;
mso-list-template-ids:602707832;}
@list l2:level1
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l2:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l2:level3
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2:level4
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2:level5
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2:level6
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2:level7
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2:level8
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2:level9
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l3
{mso-list-id:1861511155;
mso-list-template-ids:1607625468;}
@list l3:level1
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l3:level2
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l3:level3
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l3:level4
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l3:level5
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l3:level6
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l3:level7
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l3:level8
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l3:level9
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">FYSA<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" style="border-collapse:collapse">
<tbody>
<tr>
<td width="623" valign="top" style="width:467.5pt;padding:0in 5.4pt 0in 5.4pt">
<p class="MsoNormal" style="margin-bottom:0in;line-height:normal"><a name="_Hlk107987297"><o:p> </o:p></a></p>
<p class="MsoNormal" style="margin-bottom:0in;line-height:normal"><span style="mso-bookmark:_Hlk107987297"><img width="602" height="153" style="width:6.2708in;height:1.5902in" id="Picture_x0020_1" src="cid:image003.png@01D8911F.F363FE60"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in;line-height:normal"><span style="mso-bookmark:_Hlk107987297"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in;line-height:normal"><span style="mso-bookmark:_Hlk107987297">The National Institute of Standards and Technology (NIST) has announced that a new post-quantum cryptographic standard will replace current public-key
cryptography, which is vulnerable to quantum-based attacks. <b>Note:</b> the term “post-quantum cryptography” is often referred to as “quantum-resistant cryptography” and includes, “cryptographic algorithms or methods that are assessed not to be specifically
vulnerable to attack by either a CRQC [cryptanalytically relevant quantum computer] or classical computer.” (See the
</span><a href="https://www.whitehouse.gov/briefing-room/statements-releases/2022/05/04/national-security-memorandum-on-promoting-united-states-leadership-in-quantum-computing-while-mitigating-risks-to-vulnerable-cryptographic-systems/"><span style="mso-bookmark:_Hlk107987297">National
Security Memorandum on Promoting United States Leadership in Quantum Computing While Mitigating Risks to Vulnerable Cryptographic Systems</span><span style="mso-bookmark:_Hlk107987297"></span></a><span style="mso-bookmark:_Hlk107987297"> for more information).<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in;line-height:normal"><span style="mso-bookmark:_Hlk107987297"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in;line-height:normal"><span style="mso-bookmark:_Hlk107987297">Although NIST will not publish the new post-quantum cryptographic standard for use by commercial products until 2024, CISA and NIST strongly recommend
organizations start preparing for the transition now by following the </span><a href="https://www.dhs.gov/quantum"><span style="mso-bookmark:_Hlk107987297">Post-Quantum Cryptography Roadmap</span><span style="mso-bookmark:_Hlk107987297"></span></a><span style="mso-bookmark:_Hlk107987297">,
which includes:<o:p></o:p></span></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoNormal" style="margin-bottom:0in;line-height:normal;mso-list:l1 level1 lfo3">
<span style="mso-bookmark:_Hlk107987297">Inventorying your organization’s systems for applications that use public-key cryptography.<o:p></o:p></span></li><li class="MsoNormal" style="margin-bottom:0in;line-height:normal;mso-list:l1 level1 lfo3">
<span style="mso-bookmark:_Hlk107987297">Testing the new post-quantum cryptographic standard in a lab environment; however, organizations should wait until the official release to implement the new standard in a production environment.<o:p></o:p></span></li><li class="MsoNormal" style="margin-bottom:0in;line-height:normal;mso-list:l1 level1 lfo3">
<span style="mso-bookmark:_Hlk107987297">Creating a plan for transitioning your organization’s systems to the new cryptographic standard that includes:
<o:p></o:p></span></li><ul style="margin-top:0in" type="circle">
<li class="MsoNormal" style="margin-bottom:0in;line-height:normal;mso-list:l1 level2 lfo3">
<span style="mso-bookmark:_Hlk107987297">Performing an interdependence analysis, which should reveal issues that may impact the order of systems transition;<o:p></o:p></span></li><li class="MsoNormal" style="margin-bottom:0in;line-height:normal;mso-list:l1 level2 lfo3">
<span style="mso-bookmark:_Hlk107987297">Decommissioning old technology that will become unsupported upon publication of the new standard; and<o:p></o:p></span></li><li class="MsoNormal" style="margin-bottom:0in;line-height:normal;mso-list:l1 level2 lfo3">
<span style="mso-bookmark:_Hlk107987297">Ensuring validation and testing of products that incorporate the new standard.<o:p></o:p></span></li></ul>
<li class="MsoNormal" style="margin-bottom:0in;line-height:normal;mso-list:l1 level1 lfo3">
<span style="mso-bookmark:_Hlk107987297">Creating acquisition policies regarding post-quantum cryptography. This process should include:
<o:p></o:p></span></li><ul style="margin-top:0in" type="circle">
<li class="MsoNormal" style="margin-bottom:0in;line-height:normal;mso-list:l1 level2 lfo3">
<span style="mso-bookmark:_Hlk107987297">Setting new service levels for the transition.<o:p></o:p></span></li><li class="MsoNormal" style="margin-bottom:0in;line-height:normal;mso-list:l1 level2 lfo3">
<span style="mso-bookmark:_Hlk107987297">Surveying vendors to determine possible integration into your organization’s roadmap and to identify needed foundational technologies.<o:p></o:p></span></li></ul>
<li class="MsoNormal" style="margin-bottom:0in;line-height:normal;mso-list:l1 level1 lfo3">
<span style="mso-bookmark:_Hlk107987297">Alerting your organization’s IT departments and vendors about the upcoming transition.<o:p></o:p></span></li><li class="MsoNormal" style="margin-bottom:0in;line-height:normal;mso-list:l1 level1 lfo3">
<span style="mso-bookmark:_Hlk107987297">Educating your organization’s workforce about the upcoming transition and providing any applicable training.<o:p></o:p></span></li></ul>
<p class="MsoNormal" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:.5in;line-height:normal">
<span style="mso-bookmark:_Hlk107987297"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in;line-height:normal"><span style="mso-bookmark:_Hlk107987297">For additional guidance and background, CISA and NIST strongly encourage users and administrators to review:<o:p></o:p></span></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoNormal" style="margin-bottom:0in;line-height:normal;mso-list:l2 level1 lfo6">
<span style="mso-bookmark:_Hlk107987297">NIST press release, </span><a href="https://www.nist.gov/news-events/news/2022/07/nist-announces-first-four-quantum-resistant-cryptographic-algorithms"><span style="mso-bookmark:_Hlk107987297">NIST Announces First Four
Quantum-Resistant Cryptographic Algorithms</span><span style="mso-bookmark:_Hlk107987297"></span></a><span style="mso-bookmark:_Hlk107987297">.<o:p></o:p></span></li><li class="MsoNormal" style="margin-bottom:0in;line-height:normal;mso-list:l2 level1 lfo6">
<span style="mso-bookmark:_Hlk107987297">The NIST and </span><a href="https://csrc.nist.gov/projects/post-quantum-cryptography"><span style="mso-bookmark:_Hlk107987297">Post-Quantum Cryptography</span><span style="mso-bookmark:_Hlk107987297"></span></a><span style="mso-bookmark:_Hlk107987297">,
</span><a href="https://csrc.nist.gov/projects/post-quantum-cryptography/post-quantum-cryptography-standardization"><span style="mso-bookmark:_Hlk107987297">Post-Quantum Cryptography Standardization</span><span style="mso-bookmark:_Hlk107987297"></span></a><span style="mso-bookmark:_Hlk107987297">,
and </span><a href="https://www.nccoe.nist.gov/crypto-agility-considerations-migrating-post-quantum-cryptographic-algorithms"><span style="mso-bookmark:_Hlk107987297">Migration to Post-Quantum Cryptography</span><span style="mso-bookmark:_Hlk107987297"></span></a><span style="mso-bookmark:_Hlk107987297">
websites.<o:p></o:p></span></li></ul>
<p class="MsoNormal" style="margin-bottom:0in;line-height:normal"><span style="mso-bookmark:_Hlk107987297"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-bookmark:_Hlk107987297"><b><span style="color:#1F497D">Theresa A. Masse<o:p></o:p></span></b></span></p>
<p class="MsoNormal"><span style="mso-bookmark:_Hlk107987297"><span style="font-size:10.0pt;line-height:105%;color:#1F497D">Cyber Security Advisor, Region 10 (Oregon)
<o:p></o:p></span></span></p>
<p class="MsoNormal"><span style="mso-bookmark:_Hlk107987297"><span style="font-size:10.0pt;line-height:105%;color:#1F497D">Cybersecurity and Infrastructure Security Agency<o:p></o:p></span></span></p>
<p class="MsoNormal"><span style="mso-bookmark:_Hlk107987297"><span style="font-size:10.0pt;line-height:105%;color:#1F497D">Department of Homeland Security<o:p></o:p></span></span></p>
<p class="MsoNormal"><span style="mso-bookmark:_Hlk107987297"><span style="font-size:10.0pt;line-height:105%;color:#1F497D">Phone: (503) 930-5671
<o:p></o:p></span></span></p>
<p class="MsoNormal"><span style="mso-bookmark:_Hlk107987297"><span style="font-size:10.0pt;line-height:105%;color:#1F497D">Email:</span></span><span style="mso-bookmark:_Hlk107987297"><span style="font-size:10.0pt;line-height:105%;color:#777777">
</span></span><a href="mailto:theresa.masse@cisa.dhs.gov"><span style="mso-bookmark:_Hlk107987297"><span style="font-size:10.0pt;line-height:105%">theresa.masse@cisa.dhs.gov</span></span><span style="mso-bookmark:_Hlk107987297"></span></a><span style="mso-bookmark:_Hlk107987297"><u><span style="font-size:10.0pt;line-height:105%;color:#0760C1"><o:p></o:p></span></u></span></p>
<p class="MsoNormal"><span style="mso-bookmark:_Hlk107987297"><span style="color:#1F497D"><o:p> </o:p></span></span></p>
<p class="MsoNormal"><span style="mso-bookmark:_Hlk107987297"><img border="0" width="97" height="97" style="width:1.0138in;height:1.0138in" id="Picture_x0020_2" src="cid:image002.png@01D8911B.9E1B3F80"><span style="color:#1F497D"><o:p></o:p></span></span></p>
<span style="mso-bookmark:_Hlk107987297"></span>
<p class="MsoNormal" style="margin-bottom:0in;line-height:normal"><span style="mso-bookmark:_Hlk107987297"><o:p> </o:p></span></p>
</td>
<span style="mso-bookmark:_Hlk107987297"></span>
</tr>
</tbody>
</table>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>