# Start with a readiness sprint.

Two weeks, a fixed fee, and a clear answer to the first question every board asks: where are we exposed, and what do we fix first?

- **2 weeks.** From kickoff to findings.
- **Fixed fee.** Agreed before we start.
- **10 priorities.** Ranked, with owners.

## What you get

1. **Exposure heatmap.** Where quantum-vulnerable cryptography sits across your estate, at a glance.
2. **Mosca analysis.** X + Y against Z for every data class you hold, so you know which data is already at risk.
3. **Top-ten priorities.** The first ten things to fix, in order, ready to take to the board.

## What the sprint covers

Assess: Know your exposure, by data class. Six-dimension readiness scan; Mosca analysis (X + Y vs Z) for every data class; Gap analysis against DORA, NIST and EU guidance.

## Afterwards

Most clients decide what comes next with the results in hand: a scoped pilot, or an ongoing programme.

1. **Readiness sprint.** A fixed-fee, two-week sprint: an exposure heatmap, a Mosca analysis and your top ten priorities.
2. **Pilot.** A scoped discovery or secure-AI pilot with named senior leads and a weekly delivery cadence.
3. **Partner.** An ongoing advisory and migration programme, led by the same senior people who ran the sprint.

## Why now

- **2035, Standards deadline.** NIST finalised its first post-quantum standards in 2024 and targets removal of quantum-vulnerable algorithms by 2035, with earlier action for high-risk systems. (Source: NIST.)
- **89%, Enterprise AI adoption.** The share of enterprises now using AI, up from 55% in 2023. (Source: McKinsey, The state of AI in 2026.)
- **$4.99M, Average breach cost.** A record, up 12% year on year. AI-enabled breaches average about $6M. (Source: IBM, Cost of a Data Breach 2026.)

To book: https://qctcapital.com/studio/contact?topic=Readiness%20sprint

---

Canonical page: https://qctcapital.com/studio/readiness-sprint
Contact: contact@qctcapital.com
Site summary for agents: https://qctcapital.com/llms.txt