Post-Quantum Cryptography: What CIOs Need to Start Planning Now
Quantum computing sounds like a problem for physicists and a handful of intelligence agencies. It isn’t. It’s a problem for every CIO whose organization depends on encryption, which is to say every CIO. The good news is that the roadmap now exists. The uncomfortable news is that the journey takes years, which means the right time to start planning is now.
The Quantum Threat in Plain Language
The encryption protecting your banking transactions, your VPN tunnels, and your corporate communications relies on mathematical problems that conventional computers find extraordinarily difficult to solve. Factoring enormous numbers, for example, would take a classical computer longer than the age of the universe.
Quantum computers work differently. Using properties called superposition and entanglement, they can solve certain classes of problems exponentially faster than classical machines. One of those classes, thanks to Shor’s algorithm, happens to include the math behind the asymmetric cryptography (RSA, ECC, Diffie-Hellman) that underpins most of internet security. When a sufficiently powerful quantum computer arrives, data encrypted with today’s standard algorithms becomes readable.
Harvest Now, Decrypt Later
Here’s the part that makes this a present-tense problem rather than a future one: adversaries don’t need a working quantum computer to begin the attack. The “harvest now, decrypt later” strategy involves intercepting and storing encrypted data today, then decrypting it once quantum capability arrives.
If your organization handles information that must stay confidential for a decade or more (health records, financial data, intellectual property, legal documents), that data is at risk right now, because traffic captured today can be unlocked later.
NIST Has Drawn the Roadmap
After an eight-year global evaluation, the National Institute of Standards and Technology finalized its first three post-quantum cryptography standards in August 2024: ML-KEM for key encapsulation, ML-DSA for digital signatures, and SLH-DSA for hash-based signatures, with FN-DSA expected to follow. The destination is defined. What CIOs must plan is the journey, and industry estimates put a full enterprise migration at three to seven years.
The Timeline Question
When will a cryptographically relevant quantum computer actually exist? Estimates range from ten to fifteen years down to considerably sooner, and the honest answer is that nobody knows. That uncertainty is precisely the point. If your migration takes five years and the threat materializes in ten, you have a comfortable margin only if you start soon. If either number moves against you, you’re late.
A CIO’s Roadmap
Step 1: Build a cryptographic inventory. You cannot migrate what you cannot see. Catalog every system, application, and protocol that uses cryptography: TLS certificates, VPN configurations, database and disk encryption, code signing, email security, and the embedded systems everyone forgets. Expect surprises; most organizations have far more cryptographic dependencies than they realize.
Step 2: Assess risk by data longevity. Prioritize based on two questions: how sensitive is the data, and how long must it remain confidential? Systems protecting long-lived sensitive data go to the top of the list. Factor in migration difficulty, because some systems will be simple configuration changes while others require vendor cooperation or replacement.
Step 3: Push your vendors. Most of your cryptography lives inside products you buy, not code you wrote. Engage critical vendors now about their post-quantum roadmaps, and ask specifically about hybrid approaches that combine classical and post-quantum algorithms during the transition. Vendor answers (or the absence of them) belong in your risk register.
Step 4: Pilot and migrate incrementally. Avoid the big-bang migration. Start with new deployments, where choosing post-quantum-ready options costs little. Migrate the highest-risk systems first using hybrid modes, and test extensively; the new algorithms have different key sizes and performance characteristics that can surface in unexpected places.
The Compliance Dimension
Regulatory pressure is already building. The White House has directed federal agencies to transition to post-quantum standards, and financial and healthcare regulators are beginning to ask about quantum risk in examinations. My prediction, having watched several compliance waves form: within two to three years, “what is your post-quantum plan?” becomes a standard audit question. Organizations with an inventory and a roadmap will answer it in a sentence. Organizations without one will start a fire drill.
Start This Week
None of this requires a budget line to begin. Assign clear ownership of the post-quantum initiative. Kick off the cryptographic inventory. Read NIST’s standards documentation. Put post-quantum roadmap questions into your next vendor conversations. And brief your leadership: quantum readiness is a board-level risk conversation, and the CIOs who raise it early will be the ones trusted to manage it.