Agenda
19:00 - Event start with introductions
19:10 - Speaker - Samuel Butcher
19:40 - Speaker - Arinze Mba
20:10 - Panel discussion, followed by Q&As
20:30 - Event close
Synopsis
When post-quantum migration fails, it usually fails for architectural and organisational reasons rather than cryptographic ones. The eighth evening of the Summer of PQC series moves up a layer, from tooling and posture to the structures that determine who owns cryptography, how cryptographic change is approved, and where migration sits alongside every other transformation programme competing for the same budget and the same scarce people.
Samuel Butcher brings the view from inside a large regulated financial institution, where cryptography is embedded in decades of accumulated systems, third-party dependencies and vendor roadmaps that no single team controls. He looks at how enterprise security architecture absorbs a change of this scale: where cryptographic decisions are actually made, how migration is sequenced against existing change pipelines, and what an architecture function needs in place before a migration plan can be more than an aspiration.
Arinze Mba presents research on governance frameworks for enterprise post-quantum migration, taking up a theme that has run through the series since its opening evening: discovery without governance produces findings that nobody is empowered to act on. He sets out what a governance framework must specify - decision rights, accountability, escalation and measurement - for a migration programme to survive contact with an organisation, and how emerging guidance can be mapped onto the risk and control processes an enterprise already operates.
Together the two talks make the case that the hardest problems in post-quantum migration are not in the mathematics.
A moderated panel and audience questions and answers follow.
About the speakers
Samuel Butcher is an Enterprise Security Architect at Bank of Ireland, where he works on the design and governance of cryptographic security architecture across a large, heavily regulated financial services estate. His earlier career spans both consultancy and in-house security roles, giving him experience of advising organisations on security architecture and of delivering it from the inside. He holds an MSc in Security and Risk Management from the University of Copenhagen, where Professor Ole Wæver's influential poststructural realism shaped his understanding of complex sociotechnical challenges.
Arinze Mba is a doctoral researcher based in Nigeria working on the governance of enterprise post-quantum migration - the organisational layer that sits above cryptographic discovery and determines whether findings are ever acted upon. His research develops a governance framework for enterprises undertaking post-quantum transition, addressing decision rights, accountability and measurement rather than tooling alone. He follows and contributes publicly to the development of migration guidance, including the mapping of post-quantum migration capabilities onto established cybersecurity risk and control frameworks.
Our events are for adults aged 16 years and over.
BCS is a membership organisation. If you enjoy this event, please consider joining BCS. You’ll be very welcome. You’ll receive access to many exclusive career development tools, an introduction to a thriving professional community and also help us Make IT Good For Society. Join BCS today
This event is brought to you by: Information Security specialist group.
