Quantum Readiness Roadmap

Executive Summary

Quantum computers pose a grave threat to the encryption methods that protect our digital world. Once quantum technology fully matures, these powerful machines could render traditional encryption ineffective, enabling criminals or state adversaries to expose sensitive personal, corporate, and government data, undermining trust in digital systems. This threat demands immediate action. While it remains unclear exactly when quantum computers will break today’s encryption, taking proactive steps now can significantly reduce future disruption and cost.

The federal government has mandated that all federal systems transition to new, quantum-resistant encryption standards, known as post-quantum cryptography (PQC), by 2035. Regulatory bodies and industry standards will likely soon follow suit, requiring numerous organizations to upgrade to quantum-resistant algorithms. The sooner these organizations prepare, the less disruptive and expensive the transition will be. In fact, with early preparation, the transition can give organizations a proactive edge in managing this quantum threat.

This paper offers a six-step plan to help chief information officers and other technology leaders in the private sector navigate the shift to quantum-resistant encryption. Organizations should:

1. Designate a leader to spearhead the effort
2. Inventory all encryption systems
3. Prioritize which systems to address based on potential risks
4. Understand available mitigation strategies
5. Develop a realistic transition plan
6. Regularly monitor and adjust the plan as needed

By taking action now, organizations can safeguard their data and navigate the transition to a quantum future with minimal disruption and cost.