--- title: The Compliance Timelines Are Converging: Every Road Now... description: Multiple regulatory frameworks — PCI DSS, CMMC, DORA, FIPS 140-3, NSM-10, EU CRA, ISO 27001 — are converging on the same narrow compliance window through... canonical: https://daily.dev/posts/the-compliance-timelines-are-converging-every-road-now-leads-to-a-cryptographic-bill-of-materials-spd8oklbq twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: The Compliance Timelines Are Converging: Every Road Now Leads to a Cryptographic Bill of Materials | daily.dev og:description: Multiple regulatory frameworks — PCI DSS, CMMC, DORA, FIPS 140-3, NSM-10, EU CRA, ISO 27001 — are converging on the same narrow compliance window through... og:url: https://daily.dev/posts/the-compliance-timelines-are-converging-every-road-now-leads-to-a-cryptographic-bill-of-materials-spd8oklbq og:image: https://api.daily.dev/og/posts/SPD8OklBQ.png og:image:alt: The Compliance Timelines Are Converging: Every Road Now Leads to a Cryptographic Bill of Materials og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # The Compliance Timelines Are Converging: Every Road Now Leads to a Cryptographic Bill of Materials **[Security Boulevard](https://daily.dev/sources/securityboulevard)** · 8 min read · 0 upvotes · 0 comments ## Summary Multiple regulatory frameworks — PCI DSS, CMMC, DORA, FIPS 140-3, NSM-10, EU CRA, ISO 27001 — are converging on the same narrow compliance window through 2030–2035, all demanding organizations know their cryptographic posture. The post-quantum transition is harder than previous algorithm migrations because Shor's algorithm threatens the entire asymmetric cryptography stack (RSA, ECDSA, ECDH), and 'harvest now, decrypt later' attacks mean exposure has already begun. Certificate scanners and TLS tools cover only a narrow slice of cryptographic risk; full discovery must span system, network, application, and data-at-rest layers. The recommended artifact is a Cryptographic Bill of Materials (CBOM) — a machine-readable, continuously updated inventory of keys, certificates, algorithms, protocols, and their application dependencies, ideally in CycloneDX format. Practical steps include automated discovery beyond certificates, asset-to-system correlation, risk scoring, crypto-agility design, and treating all frameworks as views over one shared inventory. The post is sponsored content promoting Encryption Consulting's CBOM Secure product and a PQC readiness self-assessment. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Entrust Turns CBOM Data Into Action With Expanded Cryptographic Security Platform](https://daily.dev/posts/entrust-turns-cbom-data-into-action-with-expanded-cryptographic-security-platform-cjo0zcx4u) · The Quantum Insider · 0 upvotes · 0 comments - [Why cryptographic inventory is key for post-quantum security](https://daily.dev/posts/why-cryptographic-inventory-is-key-for-post-quantum-security-rjlq7hjg5) · Tenable Blog · 0 upvotes · 0 comments - [The post-quantum EO is an important milestone. Now it’s time to get to work](https://daily.dev/posts/the-post-quantum-eo-is-an-important-milestone-now-it-s-time-to-get-to-work-kxyigr3vm) · Cloudflare · 1 upvotes · 0 comments - [Your Encryption Has an Expiration Date: France Turns Quantum Risk Into Procurement Law](https://daily.dev/posts/your-encryption-has-an-expiration-date-france-turns-quantum-risk-into-procurement-law-22hbagzog) · Security Boulevard · 0 upvotes · 0 comments - [Microsoft, Google and Cloudflare just made 2029 the new quantum deadline](https://daily.dev/posts/microsoft-google-and-cloudflare-just-made-2029-the-new-quantum-deadline-r6dmkegc7) · The New Stack · 0 upvotes · 0 comments --- Tags: [#quantum-computing](https://daily.dev/tags/quantum-computing), [#compliance](https://daily.dev/tags/compliance), [#cryptography](https://daily.dev/tags/cryptography) [View this post on daily.dev](https://daily.dev/posts/the-compliance-timelines-are-converging-every-road-now-leads-to-a-cryptographic-bill-of-materials-spd8oklbq) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"The Compliance Timelines Are Converging: Every Road Now Leads to a Cryptographic Bill of Materials","url":"https://daily.dev/posts/the-compliance-timelines-are-converging-every-road-now-leads-to-a-cryptographic-bill-of-materials-spd8oklbq","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/the-compliance-timelines-are-converging-every-road-now-leads-to-a-cryptographic-bill-of-materials-spd8oklbq"},"datePublished":"2026-07-24T15:59:09.777Z","dateModified":"2026-07-24T18:49:38.173Z","description":"Multiple regulatory frameworks — PCI DSS, CMMC, DORA, FIPS 140-3, NSM-10, EU CRA, ISO 27001 — are converging on the same narrow compliance window through...","image":"https://media.daily.dev/image/upload/s--OHB84bZF--/f_auto/v1722860399/public/Placeholder%2010","thumbnailUrl":"https://media.daily.dev/image/upload/s--OHB84bZF--/f_auto/v1722860399/public/Placeholder%2010","isAccessibleForFree":true,"articleSection":"Security Boulevard","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Security Boulevard","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/3613c832180040de8d85bb29f74395be","url":"https://daily.dev/sources/securityboulevard"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/the-compliance-timelines-are-converging-every-road-now-leads-to-a-cryptographic-bill-of-materials-spd8oklbq","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"quantum-computing,compliance,cryptography","timeRequired":"PT8M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Security Boulevard","item":"https://daily.dev/sources/securityboulevard"},{"@type":"ListItem","position":3,"name":"The Compliance Timelines Are Converging: Every Road Now Leads to a Cryptographic Bill of Materials"}]} ```