Assessment rubric
What each 1-5 ordinal means on the four assessment dimensions, and which measured evidence corroborates it.
QubiTrust assessment rubric v1. These are QubiTrust's own words, drafted for this product. They are not a regulator's scale and not a standard, and no anchor on this page is attributable to any external body. Version v1 is sealed into the append-only activity chain with every assessment you save — on the event, never as a column on the component row.
You pick the ordinal; the deterministic engine consumes it. The Corroboration column names which measured evidence supports a cell — a dash means the rubric names none, and the cell rests on your judgement. Your own measured figure is shown beside the cell in the assessment workspace, never here.
This page is generated from the same rubric the assessment grid scores against, so the two cannot drift apart.
Business impact
What it costs the business if the cryptography in this domain fails or its records stop being trustworthy.
- Engine field:
businessImpact - Blank cell: Blank = not assessed. The domain contributes nothing to the score.
- Blank cell, domain has routed evidence: Blank = not assessed by you. The domain can still score from measured readiness alone (basis evidence-only).
| Level | Label | Anchor | Corroboration |
|---|---|---|---|
| 1 | Negligible | Internal tooling. | — |
| 2 | Minor | One team's service degraded <1 day. | — |
| 3 | Moderate | Business service/managed-client SLA impaired; regulator-notifiable. | — |
| 4 | Major | Revenue/accreditation-bearing service unavailable or integrity lost; contract at risk. | — |
| 5 | Severe | Group-wide outage or loss of trust in signed/encrypted records; accreditation suspension. | — |
Inherent likelihood
How likely that failure is over the CRQC horizon, before any mitigation. This scale starts high on purpose.
- Engine field:
inherentLikelihood - Blank cell: Blank = not assessed. The domain contributes nothing to the score.
- Blank cell, domain has routed evidence: Blank = not assessed by you. The domain can still score from measured readiness alone (basis evidence-only).
| Level | Label | Anchor | Corroboration |
|---|---|---|---|
| 1 | Rare | No quantum-vulnerable crypto. | Measured readiness for the domain, and whether any routed asset presents classical key exchange. |
| 2 | Unlikely | Quantum-vulnerable, short-lived, no harvest-now-decrypt-later data. | Certificate validity windows and whether the domain carries long-secrecy data. |
| 3 | Possible | RSA/ECC in normal use, no PQC path. | Measured readiness for the domain (0% with routed assets corroborates this cell). |
| 4 | Likely | Quantum-vulnerable crypto protecting long-lived or state-actor-relevant data, externally exposed. | HNDL exposure: routed assets measured with classical key exchange on an externally reachable host. |
| 5 | Almost certain | Quantum-vulnerable, exposed, secrecy required past the horizon, no roadmap. | HNDL exposure plus the absence of any mitigation timescale on this domain. |
Residual impact
The same impact scale, scored after the mitigations that are actually in flight.
- Engine field:
residualImpact - Blank cell: Blank = inherit the business-impact figure.
| Level | Label | Anchor | Corroboration |
|---|---|---|---|
| 1 | Negligible | Internal tooling. | — |
| 2 | Minor | One team's service degraded <1 day. | — |
| 3 | Moderate | Business service/managed-client SLA impaired; regulator-notifiable. | — |
| 4 | Major | Revenue/accreditation-bearing service unavailable or integrity lost; contract at risk. | — |
| 5 | Severe | Group-wide outage or loss of trust in signed/encrypted records; accreditation suspension. | — |
Residual likelihood
How likely the failure remains once the in-flight migration work is counted.
- Engine field:
residualLikelihood - Blank cell: Blank = inherit the inherent-likelihood figure.
| Level | Label | Anchor | Corroboration |
|---|---|---|---|
| 1 | Rare | PQC/hybrid deployed and verified domain-wide. | Measured readiness ≥90% corroborates this cell. |
| 2 | Unlikely | Migration under way, majority done. | Measured readiness above 50% corroborates this cell. |
| 3 | Possible | Funded plan, pilots. | A mitigation timescale is set and some routed assets are already hybrid or PQC-ready. |
| 4 | Likely | Plan on paper. | A target date exists but measured readiness has not moved off 0%. |
| 5 | Almost certain | No plan. | No mitigation timescale on this domain and no measured readiness. |
Previous: Discovery interview · Next: Calibration workshop
All steps: Analyst method