# Ben Volkow

Ben Volkow shares commentary on post-quantum cryptography and organizational quantum readiness, including cryptography inventories, risk assessment, and migration planning. Volkow's posts describe QIZ Security as helping organizations with that work.

- Profile: https://b2binfluencer.marketing/creators/ben-volkow/
- LinkedIn: https://www.linkedin.com/in/benvolkow
- LinkedIn followers: 11,232
- Topics: post-quantum-cryptography
- Based on 10 dated posts, latest 2026-10-07

## Summary

Most useful as a post-quantum cryptography policy and quantum-readiness voice for co-marketing or advisory content.

- Best for: A cybersecurity vendor or consultancy seeking a post-quantum cryptography thought-leadership voice for co-marketing or advisory work.
- Not for: Broad-reach sponsorship or non-specialist awareness campaigns needing measured demographic targeting and long-form technical tutorials.
- Check first: Confirm broader body of work and audience demographics before contacting them.

### Takeaways

- Policy has moved post-quantum cryptography from research topic to operational mission.
- The mandate is not the bottleneck; funding, sector timelines, and production-ready products are.
- Readiness sequence: discover cryptography, maintain inventory, map CBOM dependencies, prioritize risk, govern migration.

## Main ideas

- **Policy has moved post-quantum cryptography from research topic to operational mission**: Ben Volkow reads regulation as the moment the market changes, not as background reading. In a post on U.S. Executive Order 14412, they argue that PQC is no longer a future research topic but an operational mission: the order assigns accountable leadership, requires agency migration plans, sets procurement requirements, creates a federal pilot, and imposes firm deadlines. A second post applies the same reading to the G7 and ANSSI call for public and private organizations to prepare now, noting that CISA reinforced the message the same week. They conclude that PQC has become an executive, operational, and procurement priority. The distinctive move is treating each announcement as a change in what buyers must do, not as news to note.
- **The mandate is not the bottleneck — funding, sector timelines, and production-ready products are**: Rather than simply add urgency to policy news, Ben Volkow lists what the policy leaves unresolved, drawing on QIZ's engagements with federal teams. The three gaps: deadlines without dedicated budgets and skilled personnel; critical-infrastructure sectors such as healthcare, finance, energy, and telecom that still need clearer timelines, sector-specific guidance, and meaningful incentives; and a shortage of validated, interoperable, production-ready products for hybrid migration, cloud, legacy systems, operational technology, and constrained environments. Without those pieces, the argument goes, mandates produce plans rather than deployment.
- **Readiness runs from cryptographic discovery to a governed migration roadmap**: The G7 post turns pressure into a method. Ben Volkow sets out five fundamentals of quantum readiness: discover where cryptography is used across systems and supply chains; build and continuously maintain a cryptographic inventory; use a machine-readable CBOM to map dependencies; assess quantum risk and prioritize remediation; and establish governance with a practical migration roadmap. The sequence puts visibility and continuous maintenance before remediation: an inventory that goes stale is not readiness. The CBOM is the artifact that makes dependencies legible. They then state that this is the work QIZ Security does.
- **"Harvest now, decrypt later" is the spending argument, not the deadline**: In Ben Volkow's telling, the strongest reason to act early is the current threat model, not the arrival date of a quantum computer. Because encrypted data can be captured now and decrypted later, long-lived sensitive data and mission-critical systems must be prioritized well ahead of final compliance deadlines. This reframes the decision from a compliance schedule to a data-lifetime question, implying that priorities should reflect how long information must stay secret.
- **Quantum readiness is framed as a decade-scale mission, advanced through partners and markets**: The shorter posts show Ben Volkow's public priorities: cryptography and quantum readiness are among the most significant cybersecurity challenges of the coming decade, and the company's growth is described in terms of customers, partners, and markets worldwide rather than a single product line. Event attendance is framed similarly — going to a cybersecurity summit to discuss PQC readiness and "spread quantum safety." The emphasis is on adoption across an ecosystem, consistent with the readiness method above.
- **What the material does not show**: All four updates are short LinkedIn posts, with no long-form technical writing, product deep dive, or educational series. No publication dates accompany the material, so ask for dated examples and deeper technical work if those matter to your decision. The posts assert QIZ Security's activities and capabilities, and report federal gaps from the company's own engagements.

## Work to read

- [U.S. Executive Order 14412: the mandate is in place, execution is not](https://www.linkedin.com/posts/benvolkow_pqc-eo14412-federal-activity-7497636940268249089-ihBc)
- [The G7 and CISA message, and the five steps behind quantum readiness](https://www.linkedin.com/posts/benvolkow_postquantumcryptography-pqc-quantumreadiness-activity-7502947108916998144-1vK9)
- [Investor backing and growth framing at QIZ Security](https://www.linkedin.com/posts/benvolkow_thank-you-evolution-equity-partners-for-the-activity-7506376113342857217-vTQy)

## Brand relationships

- **QIZ Security** (disclosed_partnership)
- **Evolution Equity Partners** (investment)
- **Innovate Cybersecurity Summit** (mention)

## Partnerships

Ben Volkow's four posts publish no sponsorship, co-marketing or paid-partnership formats, and provide no public partnership inquiry route. The only partnership named is Evolution Equity Partners, thanked in a September 2026 post for trust and support as QIZ Security grew across customers, partners and markets worldwide; the post presents this as backing for the business, not a buyer-facing sponsorship package. Their other posts offer commentary on post-quantum cryptography regulation and a cybersecurity summit they planned to attend. A planner interested in working with Volkow should ask directly about co-marketing or advisory arrangements.

## Alternatives

- Chaitanya Challa: Choose Chaitanya Challa for an enterprise-implementation walk-through across sectors. The posts explore how PQC migration differs across banking, healthcare and critical infrastructure, framing the challenge as modernising cryptography across applications, devices, OT environments, medical technologies, hardware platforms, supply chains and accumulated technical debt without disrupting services. A second post reads the U.S. Treasury's Quantum-Readiness Task Force as a sign that crypto-agility is becoming an operational-resilience capability. It lays out a named sequence a partner can build an assessment or workshop around: Discovery, Dependency Mapping, Risk Prioritization, Crypto Agility, Migration Orchestration, Continuous Readiness. This is the stronger option when the campaign promise is "here is how migration actually gets orchestrated outside your own systems" rather than "here is what the regulation now requires."
- Bryant D Nielson: Choose Bryant D Nielson when the campaign targets the board, audit and risk function rather than the security engineering team. The posts argue that the real quantum deadline often hides in a data-retention policy, and offer a usable rule: if data lifetime plus migration time exceeds the time remaining before cryptographic disruption, there is already a quantum-risk problem. They describe a named governance instrument, QCI-QS1 v2.3, with a QASI cryptographic inventory and a five-pillar Q-Risk Score that includes data longevity and exposure management. They also translate the board conversation into concrete asks: current score, inventory coverage, top exposures, vendor gaps and management actions. A second post convenes the State of Quantum Readiness Summit on March 10, 2027 in Arlington, Virginia, explicitly built as one room with no parallel tracks or vendor keynotes. It lists practical questions the audience will bring, including what they should not spend money on yet. That combination suits a campaign that needs a measurable scoring instrument, supporting governance language and an event-adjacent launch moment.
- Nick Sullivan: Choose Nick Sullivan for deployment credibility and a technical explainer on who actually shipped post-quantum cryptography. The posts recount Google deploying PQC for internal communications in November 2022 and rolling it out in Chrome by August 2023, Cloudflare introducing compatible PQC and using it for internal and origin-server communications, and NIST-proposed standards underpinning the work. Sullivan argues that a substantial share of web traffic could be protected well before the deadlines discussed in Volkow's posts. They also state half a decade of personal involvement in post-quantum cryptography and work with Cloudflare on its transition, and offer consultations to organisations on that path. A separate post invites advisor, consulting and board conversations on confidential computing, privacy technology and production security tooling. That suits a campaign built around the practitioner question "how does an organisation actually move its traffic and workloads to PQC" rather than regulatory interpretation or governance scoring.

---
AI-assisted summary of public posts. Audience demographics are not available. Engagement appears only where we checked recent posts. Method: https://b2binfluencer.marketing/methodology/