Skip to content

Intermediate

Quantum-Safe and Quantum-Unsafe Secrets: Discovery with Ground Labs

Find cryptographic assets and exposed secrets with Ground Labs Enterprise Recon, validate quantum risk, and build an evidence-based remediation and migration plan.

5 hours9 modules16 lessonsFree certificate

About this course

A practical follow-on to PrivacyBuilt's [Sensitive Data Discovery with Ground Labs Enterprise Recon](/courses/sensitive-data-discovery-ground-labs-enterprise-recon). Designed for security, privacy, infrastructure, application, cloud and governance teams. No quantum physics or programming background is required; familiarity with files, access controls and basic encryption is helpful.

## Why this matters for global organisations

Confidential records can outlive the cryptography protecting them. Keys and credentials also spread through exports, shared folders, deployment files and backups. Organisations need evidence of what exists, who can access it, which services depend on it and how changes will be tested without interrupting operations.

## What you will learn

The course separates two questions: can the cryptography resist the relevant threat, and is the asset handled securely? A post-quantum private key still needs protection. A public certificate is not automatically a leaked secret. A discovery match needs validation, ownership and context before it supports a risk decision.

Eight teaching modules contain sixteen written lessons, four numbered guided labs, a capstone, worked examples and thirty-two module questions. A twenty-question final assessment follows. Allow approximately five hours: 240 minutes for lessons and exercises, 32 minutes for module quizzes and 28 minutes for the final assessment. Installation and extended organisational pilots take additional time.

## Ground Labs at the core

Ground Labs Enterprise Recon is the featured discovery platform. The course uses its documented Quantum-Unsafe Secrets and Quantum-Safe Secrets data types, then connects findings with application, certificate, key-management and supplier evidence. Product coverage must be tested against the installed version, edition, encoding and target. Discovery alone cannot certify an entire service as quantum safe.

Explore [Enterprise Recon](https://groundlabs.com/enterprise-recon) or [request a Ground Labs demonstration](https://go.groundlabs.com/request-demo). Ask for a demonstration using your agreed asset formats and success criteria. This is independent PrivacyBuilt training featuring Ground Labs; it does not imply vendor endorsement, a commercial partnership or official certification.

## Two learning paths

The hands-on path requires separately arranged licensed or vendor-approved Enterprise Recon access, an authorised isolated sandbox and administrator support. Use disposable training keys that are never trusted by a real service. No licence, hosted scanner, executable lab or software installation is included.

The worksheet path is complete within the lessons: use the explicitly fictional inventory, scan observations, validation calculations and capstone. It teaches investigation and decision-making; it does not demonstrate live software proficiency. Copyable inventory, scan-validation, remediation and migration templates are embedded in the lessons.

## Assessment and review

PrivacyBuilt's course player uses an eighty-percent quiz pass requirement. The final assessment has twenty scenario questions. Practical exercises are self-reviewed using the supplied criteria and are not automatically graded. Any certificate is a PrivacyBuilt completion certificate, not a professional accreditation, Ground Labs certification or proof of cryptographic compliance.

Technical sources and product documentation reviewed 20 October 2026. Next editorial review: 20 January 2027, or sooner after a relevant standard, erratum or product change. Current Ground Labs documentation identifies Enterprise Recon 2.16.1. Examples are educational and require organisation-specific security and change approval before production use.

What you will be able to do

  • Distinguish quantum vulnerability, secret exposure, public cryptographic material and unknown status
  • Map sensitive data, keys, certificates, protocols and application dependencies into a usable inventory
  • Configure and evaluate Enterprise Recon quantum discovery against a labelled, isolated test corpus
  • Measure detection quality and coverage without claiming that a clean scan proves safety
  • Prioritise exposed credentials and long-lived confidentiality or signing risks using separate response tracks
  • Produce a scoped remediation record, supplier evidence request and tested post-quantum migration plan

Course content

  1. 1

    Understand quantum risk and secret exposure

    Separate cryptographic vulnerability from exposure, and learn which asset types and algorithm roles matter.

    • One asset, two different security questions12 min
    • Recognise algorithms without confusing their jobs18 min

    4-question quiz

  2. 2

    Map data, secrets and cryptographic dependencies

    Define an authorised discovery boundary and create an inventory that connects findings to services and owners.

    • Find the places where cryptographic evidence lives12 min
    • Lab 1: build the inventory and scope register18 min

    4-question quiz

  3. 3

    Prepare Enterprise Recon and a reliable test corpus

    Confirm product capability, protect scan evidence and design a controlled experiment before scanning operational data.

    • Configure the featured discovery workflow12 min
    • Lab 2: design the positive, negative and inaccessible cases18 min

    4-question quiz

  4. 4

    Run discovery and validate the results

    Use a controlled scan, reconcile errors and measure quality with transparent denominators.

    • Run an authorised scan and record its limits12 min
    • Lab 3: calculate precision, recall and coverage18 min

    4-question quiz

  5. 5

    Validate assets and close visibility gaps

    Confirm what was found, distinguish certificate fields and reconcile content discovery with operational evidence.

    • Validate the object before assigning a risk label12 min
    • Reconcile file findings with services, vaults and suppliers18 min

    4-question quiz

  6. 6

    Respond to exposure and prioritise quantum risk

    Contain present-day secret exposure and rank migration work using data lifetimes, service impact and dependencies.

    • Handle an exposed secret without creating another copy12 min
    • Lab 4: rank migration work without predicting a Q-Day18 min

    4-question quiz

  7. 7

    Design and verify a migration

    Request useful supplier evidence, test protocol and trust changes, and define closure criteria.

    • Turn a vendor claim into a testable migration plan12 min
    • Verify closure through three independent gates18 min

    4-question quiz

  8. 8

    Complete the capstone and operate the programme

    Produce a defensible evidence pack and a recurring discovery and migration dashboard.

    • Capstone: deliver Meridian's discovery-to-action briefing22 min
    • Maintain evidence, review sources and plan your next pilot8 min

    4-question quiz

  9. 9

    Final assessmentFinal assessment

    Twenty scenario questions. The PrivacyBuilt pass requirement is 80%. Complete all lessons and pass the final assessment to qualify for the platform's completion certificate; practical work remains self-reviewed.

    10-question final assessment