
| OMB M-26-15 |

| COMET Assessment |


Map Dependencies
Evaluate Risk
Prioritize Assets

![]() | Executive Roadmap |

![]() | Education + Governance |

![]() | Migration Execution |

![]() | Continuous Compliance |
COMET
Federal Post-Quantum Cryptography Readiness Program
Powered by COMET (Cryptographic Object Migration Evaluation Tool)
The release of **OMB Memorandum M-26-15, Execution of the Migration to Post-Quantum Cryptography, signals the beginning of the Federal Government's operational transition to quantum-resistant cryptography. Federal agencies are now expected to identify cryptographic dependencies, prioritize high-value systems, establish governance, and execute enterprise-wide migration strategies.
Zeichner Risk Analytics (ZRA) has developed COMET (Cryptographic Object Migration Evaluation Tool) to help organizations meet these requirements. COMET combines executive education, cryptographic discovery, risk analysis, migration planning, and implementation support into a single, structured methodology that enables agencies and contractors to move from policy to execution.
| REQUEST A COMET CONSULTATION |
Why COMET?
Most organizations know they need to migrate to post-quantum cryptography.
Few know where to begin.
COMET provides a structured framework for understanding your organization's cryptographic landscape and developing a practical migration strategy. Rather than focusing solely on cryptographic algorithms, COMET evaluates the business processes, systems, dependencies, and risks that drive successful enterprise-wide modernization.
Five COMET Phases

- Mission objectives
- Critical business services
- High Value Assets (HVAs)
- Regulatory obligations
- Operational timelines

- "Harvest Now"
- "Decrypt Later" exposure
- Nation-state threats
- Sensitive data longevity
- Regulatory drivers
- Quantum risk timelines

- PKI
- Certificates
- Applications
- Cloud services
- Identity infrastructure
- Network devices
- Embedded cryptography
- Third-party dependencies

- Mission impact
- Business risk
- Compliance risk
- Technical complexity
- Migration sequencing

- Executive Roadmap
- Governance Model
- Budget Strategy
- Acquisition Support
- Implementation Priorities
- Metrics
- Executive Reporting
Every COMET engagement includes role-based education tailored to executives, cybersecurity professionals, architects, acquisition personnel, and compliance teams.
![]() | OMB M-26-15 |
![]() | Executive Order 14412 |
![]() | NIST PQC Standards |
![]() | Cryptographic Discovery |
![]() | Crypto Agility |
![]() | Migration Governance |
![]() | High Value Assets |
![]() | Executive Decision Making |
![]() | Procurement Considerations |
![]() | Why COMET is Different Unlike traditional cryptographic consulting that begins with algorithms, COMET begins with your mission. It integrates business process analysis, cyber risk management, systems engineering, regulatory compliance, and executive governance into a practical methodology that enables organizations to execute enterprise-wide PQC migration with confidence. |
| Business Consulting Services |
LEARN MORE »
| Training & Workshops |
LEARN MORE »
| Regulatory Compliance Consulting |
LEARN MORE »
PQC Readiness & Gap Analysis
Evaluate your cryptographic posture, identify gaps, and prioritize actions for PQC readiness.
LEARN MORE »
Migration Roadmap
Develop a tailored, phased roadmap to prioritize systems, sequence actions, and guide PQC migration.
LEARN MORE »
Migration Support & Execution
Implementation support, vendor coordination, testing, and validation to help execute PQC migration.
LEARN MORE »
Ongoing Guidance & Program Support
Continuous support to update inventories, monitor changes, manage risk, and keep PQC efforts on track.
LEARN MORE »
Interested in engaging ZRA’s COMET consulting services to assess your organization’s post-quantum cryptography readiness?
Contact ZRA to schedule a consultation, discuss your requirements, and learn how COMET can support your cryptographic modernization efforts.
|
Download the COMET Slick Sheet
Discover how COMET helps organizations identify cryptographic risk, prioritize assets, and develop a tailored roadmap for post-quantum cryptography migration. |






