Services

I help organisations do two things: get quantum-safe on a sensible schedule, and make a clear-eyed call on quantum computing. The work comes in shapes you can budget for: fixed-scope assessments, a fractional programme role, and education formats. Every engagement ends with something you can act on, written in plain language.

Quantum-safe transition

For organisations under NIS2 or DORA, and for anyone holding data that must still be confidential in the 2030s. Encrypted data intercepted today can be stored and decrypted once quantum capability matures. That is why the EU roadmap starts the clock now: transition underway by the end of 2026, critical infrastructure migrated by 2030, remaining systems by 2035.

Three ways in, depending on where you stand:

1. Quantum Risk Quick Scan. Three to four weeks, fixed fee. A first cryptographic inventory of your most critical systems and suppliers, a risk classification separating long-lived sensitive data from transient traffic, and a short board report with a recommended sequence. You leave knowing your real exposure and exactly what the end-2026 milestone means for your organisation.
2. Migration roadmap and governance. Six to ten weeks. A full inventory approach across systems, certificates and vendor dependencies, prioritisation by data lifetime and quantum risk, and a costed, phased roadmap aligned to the EU milestones and the NIST standards (ML-KEM for key establishment, ML-DSA and SLH-DSA for signatures). Plus the governance pack your board needs: ownership, budget logic, and a reporting rhythm supervisors will recognise.
3. Migration programme support. Day-rate support while your teams execute: vendor and product questions, hybrid deployment choices, crypto-agility guidelines, and preparation for audits. Grounded in ISO 27005 risk practice and in what NIS2 supervision will actually ask.

Fractional quantum-safe programme lead

The EU roadmap expects board-level governance of the transition, including a named migration owner. Most mid-sized organisations cannot justify a full-time hire for that, and should not have to.

I take the role on a retainer of one or two days a week: run the programme, report to the board, manage vendors and auditors, and build the internal capability so the role can move inside when the time is right. Typical term is six to eighteen months, reviewed quarterly. You get a senior owner with a regulator's perspective, at a fraction of a hire.

Executive education and training

Decisions improve when the room understands the subject.

• Board briefing, 90 minutes

  What quantum actually changes, what regulators expect by when, and the three questions to ask your CISO next week. A first orientation briefing is free of charge and without obligation.

• Leadership workshop, half day

  From awareness to decisions: your sector's exposure, the cost of waiting versus the cost of moving, and a draft position your executive team agrees on before lunch.

• Team masterclass, one day

  The NIST standards in practice, inventory methods, hybrid deployments, crypto-agility, and the pitfalls other organisations have already found. Hands-on, honest, vendor-free.

In-company formats on request, including recurring awareness sessions and tailored material. Clear visuals and worked examples, not recycled vendor decks.

Quantum opportunity advisory

The honest version. Today's quantum computers are in the NISQ era: noisy, limited, and improving fast. For most organisations the right move in 2026 is informed monitoring. For some sectors, chemistry and materials, parts of finance, logistics and energy, a targeted pilot can already teach you something real. Knowing which group you are in is worth money in both directions.

• Opportunity scan. Two to three weeks. Where quantum computing plausibly touches your business within five years, where it does not, and what to watch so you are neither early nor late.

• Feasibility study. One use case, examined properly: problem mapping, what current hardware and algorithms can and cannot deliver, and what a meaningful pilot would look like.

• Proof of value. A small, contained experiment on cloud quantum hardware, with success criteria agreed in advance and a report your board can read.

If the honest answer is "not yet", that is the answer you will get, with a date to look again.

Technical due diligence

For investors and corporate development teams: an independent technical read on quantum vendors and startups. Claims versus physics, team versus roadmap, and where the risk really sits. Confidential, fixed scope, vendor-neutral by construction.

A note on funding

Depending on your region and size, advisory and training work may qualify for Belgian or European innovation support (VLAIO, Innoviris, EDIH programmes). It is worth checking before we start, and I will point you to the right instrument.