How-to
Setting up Q-Day Monitor alerts
Monitor turns a one-time assessment into a system of record — if you configure cadence and alerts to match how your estate actually changes.
Step 1: Establish baseline
Complete an Assess-tier baseline scan first. Monitor diffs against this baseline — without a signed baseline, drift alerts lack context.
Step 2: Set scan cadence
| Estate type | Recommended cadence |
|---|---|
| FedRAMP-path SaaS | Monthly |
| Regional bank / insurer | Quarterly |
| Stable gov contractor | Quarterly + ad-hoc after changes |
Step 3: Configure alert thresholds
Alert when:
- New quantum-vulnerable endpoints appear
- Readiness score drops more than one band
- Critical findings remain open past deadline tier dates
Step 4: Assign owners
Each finding needs an owner before Convert tier backlog prioritization. Monitor exports merge remediation status into board packs.
Upsell from Assess
Every Assess delivery should pitch Monitor before the board readout — one scan satisfies this quarter's slide; drift catches next quarter's regression.
Continue on the Q-Day hub: Monitor tier overview
References & further reading
Authoritative primary sources cited in this article. Summaries are our own — follow links for full context.
Last verified 2026-06-03
- NIST IR 8547: Transition to Post-Quantum Cryptography StandardsNIST · 2024Federal transition guidance with deprecation timelines for quantum-vulnerable algorithms.
See your exposure with evidence
Run a live PQC inventory scan, export a CBOM, and verify signed reports independently.