PKI Consortium drafts a five-level post-quantum maturity model
27 OCTOBER 2025, GLOBAL
The PKI Consortium published a draft post-quantum maturity model on 27 October 2025, defining five levels: Initial, Foundational, Advanced, Managed and Optimized. The levels describe increasing post-quantum maturity, so an organization or vendor can place itself on the scale and see what the next level requires. The model gives a structured way to answer how ready an organization is.
The model is voluntary, and vendors self-grade against it. That makes it a self-assessment tool rather than a certification scheme. Its value lies in honest internal benchmarking, so an organization gets the most from it by grading itself candidly rather than optimistically, since no independent party verifies the result.
A maturity model earns its keep by turning a vague question into a measurable one. Instead of asking whether an organization is ready, which invites a yes-or-no answer that hides nuance, the five levels let an organization track progress over time and identify the specific steps that move it from one level to the next. That structure makes a long effort feel navigable.
Why it matters. The PKI Consortium's draft model gives organizations a shared vocabulary for post-quantum maturity, from Initial to Optimized, which helps them benchmark and plan. Because it is voluntary and self-graded, its usefulness depends on honest assessment. Organizations can use it to locate where they stand today and to set a clear target level, turning a broad goal into a sequence of concrete improvements.