Jonathan2026-11-13T18:37:20+08:00November 13, 2026|
Mobile apps are now critical entry points to enterprise systems, making mobile security an essential part of modern identity protection. Discover why organizations need to connect mobile security and IAM to strengthen trust, reduce risk, and stay ahead of evolving threats.
Stay Secure,
Stay Ahead
Products
Privacy Policy | Terms of Use | Sitemap © Since 2000 i-Sprint Innovations Pte Ltd. All rights reserved (CRN: 200001838R)
| Framework | What it asks for (plain terms) | Platform controls that help |
|---|---|---|
| OWASP Top 10 for LLM | Stop prompt attacks, data leaks, too much agent power, runaway usage | Data masking, output filtering, least-privilege tokens, kill switch, token budgets |
| NIST AI RMF and GenAI profile | Govern, map, measure and manage AI risk | Agent inventory, human owners, policy store, audit logs |
| CSA Singapore: securing AI systems | Secure the AI lifecycle; control access; monitor use | Agent identity, MCP access control, gateway monitoring |
| MAS AI risk management guidance | Inventory, clear accountability, oversight of AI use | Agent registry, named human owners, evidence logs |
| Other countries (EU AI Act, ISO/IEC 42001, HKMA, BOT, BNM) | Record keeping, human oversight, risk controls | Audit by data category, kill switch, exportable logs |
Decide which agents and users can reach which MCP servers and tools.
New MCP standard (Anthropic, Microsoft, Okta) that lets the IdP control MCP access.
Record what each agent did for which human user.
One list of all MCP connections in the organization.
to AccessMatrix (the IdP), with MFA
only for MCP servers the admin approved
limited to the user’s groups and roles
allow or deny, then log on behalf of the user
Why both: the standard decides who may connect. It does not inspect traffic after the token is issued. The gateway adds a check and an audit record for each tool call.
All LLM API keys stored in one secure vault.
The gateway adds the key to each call; the agent never holds it.
Set how long a key is valid, e.g. 2 weeks for a vendor.
Cap spending on each key; stop calls when the budget runs out.
One list of every LLM key, who uses it and when it expires.
Each agent has its own ID, so every action is traceable for audit.
Block a misbehaving agent at the gateway in one click.
Every agent is assigned to a person who answers for it.
See how many LLM tokens each app or agent uses.
One list of all AI apps and agents in the organization.
Illustrative screen content, not a product screenshot.
| Course 4 | Course 5 | Course 6 | |
|---|---|---|---|
| Title | Managing PQC Migration | Digital Certificate & Key Lifecycle in a PQC World | QubitSafe Installation, Configuration & Administration |
| Duration | 2 Days (14 hours) | 2 Days (14 hours) | 1 Day (7 hours) |
| Audience | Developers, Security Engineers, Team Leads | Security Architects, Team Leads, PKI Engineers, DevSecOps, IT Operations, Infrastructure teams, Application Security Engineers | System Administrators, Platform Engineers |
| Format | Presentations & QubitSafe workshops | Presentations & QubitSafe workshops | Presentations & Admin workshops |
| QubitSafe Usage | Full hands-on: all 4 modules used in workshops | Full hands-on: Implementation module used in workshops | Presentations & admin workshops |
| Key Outcome | Execute PQC migration using QubitSafe | Manage KMS, CLM and HSM in the PQC Safe Environment | Deploy, configure, and administer QubitSafe |
| Technical Depth | Technical (hands-on implementation) | Technical (hands-on implementation) | Technical (platform administration) |
| Course 1 | Course 2 | Course 3 | |
|---|---|---|---|
| Title | PQC Migration for Executives | Planning for PQC Migration | PQC for Auditors & Compliance |
| Duration | 0.5 Day (4 hours) | 1 Day (7 hours) | 1 Day (7 hours) |
| Audience | C-Suite, Board, Senior Management | Planners, Architects, Project Managers | Risk Officers, Compliance Officers, Internal Auditors |
| Format | Presentations & facilitated discussion | Presentations & planning exercises | Presentations, document reviews & exercises |
| QubitSafe Usage | Conceptual introduction only | Platform overview for planning context | Sample CBOM, QARS & compliance report reviews |
| Key Outcome | Sponsor and govern a PQC migration programme | Build a risk-based migration roadmap | Audit and assess PQC compliance evidence |
| Technical Depth | Non-technical (business language) | Intermediate (planning & architecture) | Non-technical (audit & governance language) |
This full-day hands-on course teaches system administrators, platform engineers, and security operations staff everything they need to install, configure, and administer QubitSafe in their own environment. Where the other courses in this series focus on cryptographic outcomes — migration planning, practitioner execution, compliance evidence, or key and certificate operations — this course focuses entirely on the platform itself: deploying the software, wiring up its components, configuring modules and policies, managing users and roles, integrating with enterprise systems, and keeping QubitSafe running reliably in production.
The course follows a realistic deployment scenario from start to finish. Participants install QubitSafe on a lab VM in the morning, complete module configuration and run the first CBOM scan after lunch, and finish the day with RBAC setup, external integrations, HA configuration, backup/restore, and upgrade procedures. Four structured workshops are spread across the day so that every major administrative task is performed handson, not just described.
This intensive two-day course addresses the operational gap that no other course in this series covers: the teams who run Certificate Lifecycle Management (CLM), Key Management Systems (KMS), and Hardware Security Modules (HSMs) need a fundamentally different curriculum from developers executing code-level migrations or auditors reviewing compliance evidence. PKI engineers, platform teams, and cryptoinfrastructure operators face a specific set of challenges — how to manage PQC key objects in PKCS#11, how to issue and auto-renew hybrid certificates at scale, how to rotate keys without downtime when underlying algorithms change, and how to wire CLM, KMS, and HSM together into a crypto-agile architecture that can evolve without re-platforming.
Day 1 covers the PQC impact on cryptographic infrastructure, deep dives into KMS operations for PQC keys, and Certificate Lifecycle Management for hybrid and PQC-only certificates — with two hands-on workshops in the afternoon. Day 2 covers HSM integration for PQC key protection, full-stack crypto-agility orchestration, and operational governance — culminating in a capstone workshop that chains KMS, CLM, and HSM together to execute a live hybrid TLS migration without application downtime.
This intensive two-day course equips developers, security engineers, and technical team leaders with the knowledge and hands-on skills to execute a Post-Quantum Cryptography (PQC) migration programme from end to end. Grounded in the NIST PQC standards (ML-KEM, ML-DSA, SLH-DSA), the course takes participants through each phase of the Discover–Assess–Implement–Monitor lifecycle using the QubitSafe platform as the primary tool.
Day 1 focuses on the Discover and Assess phases: understanding cryptographic vulnerability at the code level, running discovery scans, interpreting CBOM outputs, applying QARS risk scoring, and building prioritized migration roadmaps. Day 2 covers the Implement and Monitor phases: configuring the QubitSafe PQC Proxy, implementing hybrid cryptographic patterns, validating migration correctness, enforcing cryptographic policy, and generating compliance-ready reports. Four structured workshops using QubitSafe reinforce the migration process with realistic hands-on scenarios.
QubitSafe is i-Sprint’s cryptographic asset management and PQC migration platform. Its four modules cover discovery (source, binary, network, and certificate-store scanning, plus orchestrated ingest from CLM, KMS, and network-scanning systems), assess and recommend (QARS scoring and migration recommendations), implement and validate (PQC toolkit, application-layer crypto proxy, and validation), and monitor and govern (dashboard, compliance, reporting). QubitSafe is built on i-Sprint’s AccessMatrix IAM Platform and runs within the customer’s environment.
Each workshop is designed around realistic application portfolios and uses the QubitSafe modules — Discovery, Assessment & Recommendation, Implementation, and Monitoring & Governance — to complete the full migration lifecycle.
This full-day course equips risk officers, compliance officers, and internal auditors with the knowledge and practical tools to assess Post-Quantum Cryptography (PQC) readiness from a governance and audit perspective. Unlike the Executive course (which focuses on strategy) or the technical courses (which focus on execution), this course is specifically designed for non-technical professionals who need to understand what constitutes adequate PQC compliance evidence, how to audit a PQC migration programme, and how to map cryptographic posture to regulatory requirements.
The compliance and monitoring material covered in depth in the 1-day Planning course and the 2-day Practitioner course is here restructured for a governance audience: participants learn how the Cryptography Bill of Materials (CBOM) functions as audit evidence, how QARS risk scores translate to documented risk treatment plans, how QubitSafe’s policy enforcement and audit trail outputs satisfy regulatory control requirements, and how compliance reports are mapped to key frameworks including MAS/CSA, HKMA, BOT, BNM, NIST, PCI DSS, and ISO/IEC 27001.
This full-day course prepares IT planners, security architects, and project managers to design and lead a structured Post-Quantum Cryptography migration programme for their organization. Participants learn how to take their organization from zero cryptographic visibility to a prioritized, regulator-ready migration roadmap, using a risk-based approach grounded in the NIST PQC standards and the four-phase Discover–AssessImplement–Monitor framework.
The course covers the full planning lifecycle: understanding the cryptographic landscape, building a Cryptography Bill of Materials (CBOM), applying quantum risk scoring (QARS) and Mosca Timeline analysis, selecting PQC migration strategies (direct replacement, hybrid, crypto-agility), and establishing governance structures for a multi-year programme. Practical planning exercises reinforce each module, and participants leave with a working template for their own migration plan.
PQC Migration for Executives: Understanding Quantum Risk and Organizational Readiness
This half-day executive briefing provides senior leaders with the strategic understanding needed to make informed decisions about Post-Quantum Cryptography (PQC) migration. Quantum computing is no longer a distant theoretical threat—adversaries are actively executing "Harvest Now, Decrypt Later" (HNDL) attacks today, and NIST finalized the global PQC standards in August 2024. Regulators across APAC, including MAS/CSA (Singapore), HKMA (Hong Kong), BOT (Thailand), and BNM (Malaysia), are now requiring organizations to assess quantum exposure and demonstrate migration readiness.
This course frames quantum risk in business terms, explains why PQC migration cannot be deferred, and equips executives to sponsor and govern a structured PQC migration programme. It introduces the four-phase Discover–Assess–Implement–Monitor framework delivered by the QubitSafe platform and explains how organizations can transition to quantum-safe cryptography without disrupting existing operations.
Upon successful completion of this course, participants will be able to:
Grace Hui joined i-Sprint over a decade ago and is currently the Vice President of Sales for Hong Kong, Macau, Taiwan, and ASEAN. She plays a key role in driving regional growth, leading strategic sales initiatives, and building strong client partnerships across Asia.
Grace spearheaded the company’s sustainable technology and services model to support long-term customer success. Her strengths lie in product positioning, go-to-market strategy, and ecosystem development.
Prior to i-Sprint, Grace held a senior sales management role at an IT services firm, overseeing business strategy across multiple verticals. She holds an MBA from The University of Hong Kong and actively contributes to the tech community through leadership roles with iLEAP and the Hong Kong Computer Society.
Jackson Ngan joined i-Sprint in April 2014 and currently, he is the Advisor of Sales and Channel for the Asia Pacific (excluding China).
Jackson has been serving the IT industry within the Asia Pacific region for more than 34 years. Prior to joining i-Sprint, Jackson was the VP and GM for Greater China in Avnet Technology Solution Limited. He was responsible for the overall operations and strategy for the distribution business, system integration and solution in the banking industry business and the embedded /integration business for the whole Greater China. Being the leader for the region, he had developed the strategy in channel development and recruitment, vendor selection and enhanced the operations efficiency. Before he took up GM for the Greater China region, he was the VP of business operations for the whole Asia Pacific region including Greater China, Australia, ASEAN, and India.
With his working years in IBM, Tektronix, SUN Microsystems and Avnet for the past 30+ years, Jackson has gained a lot of experience in different areas including sales and marketing, channel strategy and development, business operations, products sales and marketing, system engineering management, business strategy and development, services sales and marketing, solution distribution and solution integration with successful track records. Jackson is also very active in the IT community in Hong Kong and has been serving the Hong Kong Computer Society (HKCS) executive committee for 4 years.
Jackson graduated from the University of Hong Kong with a bachelor degree in Social Science majoring in Management and Economic Studies.
Eric Tang is the Chief Operating Officer at i-Sprint.
With over 20 years of experience in the IT industry, Eric is a seasoned leader specializing in professional services, solution architecture, cybersecurity consulting, and project management. Known for driving innovation and delivering high-impact results, he has successfully led large teams of IT professionals through complex, mission-critical projects across global enterprises. Prior to his current role, Eric held key leadership positions at ON Semiconductor and Motorola’s Semiconductor Products Sector, where he played a pivotal role in shaping strategic technology initiatives and operational excellence. Eric brings a wealth of insight and practical expertise to every engagement, offering unique perspective on navigating digital transformation, managing enterprise-scale projects, and building resilient IT infrastructures.
Eric holds a Master’s Degree in Business Administration from the University of Adelaide, Australia and Bachelor Honours Degree of Engineering in Electrical Engineering from the University of Southampton, United Kingdom.
Melvyn Ong joined i-Sprint in May 2015. He has more than 20 years of Finance experience within advanced contract manufacturing services and precision engineering machining parts for computer storage and automotive industries.
Prior to joining i-Sprint, Melvyn was with Beyonics Technology Ltd (Singapore SGX Listed) & Hokuriku Singapore Pte Ltd. He was head of Finance in Beyonics Technologies Ltd Malaysia & Thailand Operations. He led Beyonics Malaysia & Thailand Finance Team and developed Internal Control Procedures for the Group. Melvyn was also a key member in the acquisition of Seagate PCBA Assembly plant in Senai, Malaysia, which contributed USD500 million of Sales Revenue to the Group.
Melvyn is no stranger to a regional environment, having spent 9 years of Regional roles in Finance & HR in Indonesia, Thailand, Malaysia, China & Mauritius. He has a successful track record in developing and implementing costing system, commercial contracts and business finance governance for the group. Melvyn holds a Bachelor Honors Degree in Accounting from Staffordshire University (United Kingdom), and a Master’s Degree in Professional Accounting from Murdoch University (Australia). He is also a member of Institute of Singapore Chartered Accountants.
As the CEO of the company, Dutch is also the co-founder of i-Sprint and has been with the company since the Year 2000. Dutch is instrumental in providing strategic guidance on corporate technology and security policies, network infrastructure, technology platforms, business applications, products and services strategies. He is influential in establishing and managing the financial and business performance of the organization.
Over the past 19 years, Dutch has held senior management and executive level positions for high tech software companies. He has also been division managers for various operational aspects of high tech firms and he has developed a wealth of practical and hands-on experiences in managing the critical operations from professional services organization, administration, and Finance to customer care operations. He has worked in many countries such as the United States, Hong Kong, Taiwan, Malaysia, and Thailand for overseas postings and is fluent in many speaking languages. Prior to joining i-Sprint, Dutch spent four years as a managerial role in Citibank Regional Asia Pacific Technology and he was responsible for implementing and deploying technology infrastructure solutions for the bank branches across 14 countries in the Asia Pacific. Dutch holds an MBA from the University of Adelaide, Australia.
Simon Leung is Chairman of i‑Sprint Innovations. He has held senior leadership and board roles across major listed companies, including Independent Non‑Executive Director of Anhui Conch Cement (HKEX & SSE, 2016–2022), Board Member of Beijing Teamsun Technology (SSE, 2015–2017), and Executive Director and CEO of Automated Systems Holdings (HKEX, 2009–2015).
Earlier, Mr. Leung spent 17 years with Sun Microsystems (NASDAQ: JAVA) as Managing Director for Greater China and Corporate Director. He also held finance and sales positions at Wang Pacific, Unisys China, Philip Morris Asia, and Exxon Chemical Asia Pacific.
He holds a Bachelor of Science in Business Computer Methods and an MBA from California State University, Long Beach.
