OMB M-23-02

What Is OMB M-23-02?

OMB M-23-02 is a U.S. Office of Management and Budget memorandum directing federal agencies to inventory cryptographic systems vulnerable to cryptographically relevant quantum computers (CRQCs) and submit prioritized migration plans toward post-quantum cryptography.

OMB M-23-02 is the operational driver behind much of the federal PQC migration effort. It requires agencies to know where vulnerable cryptography lives across their deployed software — a question most organizations cannot answer with confidence using documentation alone. NetRise Turbine generates cryptographic inventories from compiled artifacts, producing the evidence needed to meet M-23-02 obligations and feed broader PQC readiness reporting.

Related Terms

CNSA 2.0 · Post-Quantum Cryptography · Harvest Now, Decrypt Later · Cryptographic Bill of Materials