Skip to main content
v0.2 draft -> v1.0
Standard and Council, 2026–2028

Roadmap

The standard's lifecycle v0.2 -> v2.0, the post-quantum migration sub-timeline, and the Council's three development phases (2026–2028). All dates and goals are planning targets, not guarantees.


Planning targets

Dates, versions and goals are stated as roadmap planning targets and may change. Financial figures are not published on the site.

01 —Standard and Council, 2026–2028

Standard lifecycle

From the current v0.2 draft to the major v2.0 release. The v1.0 release target is 2026-12-01, effective 2027-01-01.

v0.2

2026 (now)

v1.0

2026-12-01

v1.0.1

Q2 2027

v1.1

Q4 2027

v1.1 EN

H1 2028

v2.0

Q4 2029

v0.2

2026 (now)

Current draft: Front Matter, Section A, domains B.1–B.8, segments, levels, annexes

v1.0

2026-12-01

Target v1.0 release; effective 2027-01-01

v1.0.1

Q2 2027

Minor patch from Founding-cohort early feedback

v1.1

Q4 2027

Minor update: Kazakhstan and Belarus national requirements in Section A

v1.1 EN

H1 2028

English international edition v1.1; mappings to VARA, MAS, HK SFC, FSRA

v2.0

Q4 2029

Major release: mandatory quantum-readiness for L3; a 24-month overlap period


02 —Standard and Council, 2026–2028

Post-quantum cryptography (PQC) migration

A sub-timeline from Annex 2 (A2.3). Advisory in v1.0; mandatory for Level 3 from v2.0 (2029). NIST FIPS 203/204/205 algorithms (ML-KEM, ML-DSA, SLH-DSA).

1
Phase 1 — Inventory & Assessment
2026–2027
Cryptography inventory and quantum-risk assessment; preparation for hybrid schemes.
2
Phase 2 — Hybrid Deployments
2027–2028
Hybrid schemes on critical paths: dual-signing (ECDSA + ML-DSA), ECDH + ML-KEM in TLS key exchange.
3
Phase 3 — Compliance Assessment
2028–2029
L3: submit a hybrid PQC roadmap to the Council as an assessment-stage item (no enforcement). L2: advisory, quantum questions in the SAQ. L1: no requirement.
4
Phase 4 — Pure PQC
2029–2030
Mandatory for L3 in v2.0; legacy crypto gradually phased out for new systems.

03 —Standard and Council, 2026–2028

Council development phases 2026–2028

Three phases: Founding, Expansion, Internationalization. Dates, goals and milestones — without financial figures.

Phase goals

Key milestones

Q3 2026 – Q1 2027

Phase 1. Founding

Legal launch of the CCSA Council entity

Standard v1.0 published

5+ Founding Members signed

2+ CCSACs accredited

10+ individual CCSA-QSAs certified

3–5 pilot product certifications

Entity and trademark registration, standard authoring begins (Q3 2026)

Standard v1.0 published, 5+ Founding Members (Q4 2026)

First certifications and public launch, a Moscow conference (Q1 2027)

Q2 2027 – Q4 2027

Phase 2. Expansion

25+ Participating Organizations

10+ CCSACs accredited (3+ in the CIS)

50+ individual CCSA-QSAs

30+ certified products in the LVCS registry

At least one Russian insurer makes CCSA a requirement for crypto-insurance

Launch in Kazakhstan and Belarus (Q2 2027)

CCSA Marketplace and Threat Intelligence Feed (Q3 2027)

Launch of the CCSA Lead Auditor tier (Q3 2027)

Annual conference and Annual State Report (Q4 2027)

2028

Phase 3. Internationalization

English version of the standard v1.1

Opening of an international legal entity

5+ Founding Members outside the CIS

200+ certified products

Recognition in one non-RF jurisdiction

English edition v1.1 and an international entity (H1 2028)

Partnerships with a mid-tier audit firm and crypto infrastructure (H2 2028)

Recognition applications to VARA (Dubai) and FSRA (ADGM) (H2 2028)

Preparing for v2.0 (2029)

v2.0 preparation begins in H2 2028 (a drafting committee, a public RFC). The release window is Q4 2029, after a market-readiness assessment following Phase 3.

Standard lifecycle

The standard's lifecycle v0.2 -> v2.0, the post-quantum migration sub-timeline, and the Council's three development phases (2026–2028). All dates and goals are planning targets, not guarantees.