3
PQEaaS Service
Compliance Certification Checklist
Checklist view tied to PQEAuditLog, PQEConnection, and PQEOperation records for NIST FIPS 203, FIPS 204, FIPS 205, CNSA 2.0, and MITRE ATT&CK quantum-relevant TTP coverage.
FIPS 203 — ML-KEM evidence
Confirm key establishment and encryption evidence is present in consultant logs.
Needs evidence
FIPS 204 — ML-DSA evidence
Confirm signature deployment and signing controls are documented.
Needs evidence
FIPS 205 — SLH-DSA evidence
Confirm stateless hash-based signature evidence is captured for long-term assurance cases.
Needs evidence
CNSA 2.0 hybrid deployment
Confirm hybrid mode is active on client-facing PQE connections.
Needs evidence
MITRE ATT&CK quantum-relevant TTP coverage
Confirm handshake, key exchange, and signature-related operations are monitored for delivery evidence.
Needs evidence
Recent compliant logs
No compliant audit logs found yet.
Checklist interpretation
Use this view as the consultant handoff screen: each completed line should map to evidence in the client package, while any item marked “Needs evidence” should be resolved before final delivery.
