QRAMM assessment toolkit
Comprehensive Excel-based tool for evaluating organizational quantum readiness across 120 questions with automated scoring, dynamic visualizations, and compliance mapping to 8 major frameworks
Toolkit overview
The QRAMM Assessment Toolkit is a professional Excel-based tool designed to help organizations systematically evaluate their quantum computing readiness and cryptographic security posture.
120 assessment questions
Comprehensive evaluation across 4 dimensions and 12 practice areas
Automated scoring
Instant calculation of raw and weighted scores with risk multipliers
Dynamic visualizations
Spider diagrams, heatmaps, and executive dashboards
Compliance mapping
Alignment with NIST, FedRAMP, ISO 27001, and 5 more
Framework structure
QRAMM evaluates quantum readiness across four critical dimensions, each containing three specialized practice areas.
Cryptographic Visibility & Inventory (CVI)
Discovery and cataloging of all cryptographic assets, vulnerability assessment, and dependency mapping across the enterprise.
Strategic Governance & Risk Management (SGRM)
Executive leadership commitment, policy frameworks, risk assessment, and third-party supply chain management.
Data Protection Engineering (DPE)
Technical implementation of quantum-safe encryption for data at rest, in transit, and in use.
Implementation & Technical Readiness (ITR)
Infrastructure assessment, integration planning, and operational readiness for quantum-safe technologies.
Learn more about the QRAMM framework
Explore the complete methodology, maturity models, and implementation guidance that powers this assessment toolkit.
Explore Full Framework →Scoring methodology
The toolkit uses a dual-scoring system that provides both raw capability assessment and risk-adjusted weighted scores.
| Level | Name | Score Range | Characteristics |
|---|---|---|---|
| 1 | Basic | 1.0 to below 1.5 | Initial awareness, ad-hoc practices, limited quantum threat understanding |
| 2 | Developing | 1.5 to below 2.5 | Structured approaches emerging, initial assessments begun |
| 3 | Established | 2.5 to below 3.5 | Systematic practices, organization-wide implementation |
| 4 | Advanced | 3.5 to 4.0 | Optimized processes, continuous improvement, industry leadership |
In the toolkit's Scorecard, the Maturity Level column labels each dimension's raw score, and the raw total QRAMM score, with these four levels, so a score of 4.0 reads Advanced. The Scorecard's Maturity Distribution chart groups the 12 practice scores with different cut-offs: below 1.6 Basic, 1.6 to below 2.6 Developing, 2.6 to below 3.6 Established, 3.6 to below 4.0 Advanced, and 4.0 Optimizing.
Profile multiplier system
Your organization's unique context is captured through a profile multiplier (0.8-1.5x) that adjusts raw scores based on industry requirements, regulatory obligations, organizational scale, data sensitivity, and technology complexity. High-risk organizations (healthcare, finance, government) may see weighted scores exceeding 4.0, reflecting their need for higher quantum readiness standards.
Scorecard dashboard
The Scorecard tab provides comprehensive visualization and analysis of your assessment results.
Dimension summary dashboard
Comprehensive scorecard with spider chart visualization showing raw and weighted scores across all four dimensions.
Practice-level heatmap
Detailed breakdown of all 12 practices with color-coded maturity levels and improvement priorities.
Overall QRAMM score
Combined maturity score across all dimensions with weighted adjustments
Dimension analysis
Individual scores for CVI, SGRM, DPE, and ITR with maturity levels
Industry benchmarking
Comparison against sector-specific quantum readiness standards
Dynamic recommendations
Context-specific improvement guidance based on your unique profile
Compliance mapping
The toolkit automatically maps your assessment responses to 8 major compliance frameworks, providing coverage analysis and gap identification.
NIST PQC standards
Alignment with NIST post-quantum cryptography algorithms and migration guidance
NIST CSF 2.0
Cybersecurity Framework core functions and quantum readiness
CMMC 2.0
Cybersecurity Maturity Model Certification alignment
FISMA
Federal Information Security Modernization Act requirements for federal information systems
FedRAMP controls
Federal Risk and Authorization Management Program requirements
ISO/IEC 27001
Information security management with quantum considerations
SOC 2
Service organization controls reported against the AICPA Trust Services Criteria
CIS Controls v8
Center for Internet Security Critical Security Controls, version 8
NIST PQC compliance analysis
Detailed mapping showing alignment with NIST post-quantum cryptography standards.
FedRAMP control mapping
95% coverage across FedRAMP security control categories.
Getting started
Follow these steps to begin your quantum readiness assessment.
Download the toolkit
Access the Excel-based assessment tool with all features pre-configured.
Complete organization profile
Define your industry, scale, and risk factors for accurate scoring.
Conduct assessment
Answer questions with stakeholder input, providing evidence where available.
Review scorecard
Analyze results, identify gaps, and understand improvement priorities.
Plan improvements
Use recommendations to build your quantum readiness roadmap.
Track progress
Regular reassessment to measure advancement toward quantum readiness.
Ready to assess your quantum readiness?
Download the complete QRAMM Assessment Toolkit or take the Quick Assessment to get started.