https://qdayaudits.com/ Explore regulatory post-quantum deadlines, CycloneDX v1.6 CBOM governance playbooks, and audit scoping advisories mapped to CNSA 2.0, NIST IR 8547, EU DORA, and Australian ASD ISM. en-au Fri, 06 Nov 2026 00:00:00 GMT https://qdayaudits.com/insights/#cnsa-20-software-firmware-2027 https://qdayaudits.com/insights/#cnsa-20-software-firmware-2027 Wed, 28 Oct 2026 00:00:00 GMT Procurement teams supplying national security and regulated enterprise ecosystems face near-term LMS/XMSS/ML-DSA firmware signing and ML-KEM transport verification clauses. Actionable takeaway: Require third-party software and appliance vendors to deliver a signed CycloneDX v1.6 CBOM prior to contract renewal. (Source: NSA CNSA 2.0 Cybersecurity Advisory) CNSA-2.0 RFP-Procurement CBOM https://qdayaudits.com/insights/#asd-ism-pqc-planning https://qdayaudits.com/insights/#asd-ism-pqc-planning Mon, 14 Sep 2026 00:00:00 GMT ASD guidance emphasises maintaining a complete cryptographic asset register and eliminating hardcoded RSA-2048/ECDSA assumptions in long-lived systems ahead of 2030 transitions. Actionable takeaway: Include certificate lifecycle automation (ACME / short-lived certs) in annual Essential Eight and ISO 27001 internal audits. (Source: Australian Cyber Security Centre ISM Guidelines for Cryptography) ASD-ISM PKI-HSM Audit-Scoping https://qdayaudits.com/insights/#cyclonedx-16-cbom-adoption https://qdayaudits.com/insights/#cyclonedx-16-cbom-adoption Mon, 19 May 2025 00:00:00 GMT OWASP CycloneDX v1.6 standardised assetType=crypto-asset records covering algorithms, certificates, key lifetimes, and protocol cipher suites. Actionable takeaway: Mandate automated CBOM generation alongside SBOM artifacts in release pipelines for regulated workloads. (Source: OWASP CycloneDX CBOM Specification) CBOM NIST-IR-8547