Quantum computing poses a near-term strategic risk to enterprise data security, and the right response is to start a phased migration to post-quantum cryptography (PQC) now. The reason is not that a cryptographically relevant quantum computer exists today, but that adversaries may already be collecting encrypted data to decrypt later, and that government mandates—led by NIST's finalized standards and the NSA's January 1, 2027 deadline for National Security Systems—have already fixed the transition to a schedule. For most enterprises, the first practical move is not an algorithm swap but a cryptographic inventory and a documented migration roadmap.
The Quantum Threat: Why 'Harvest Now, Decrypt Later' is a Near-Term Risk
Quantum computers threaten the public-key cryptography that underpins modern enterprise security. As a board-level discussion guide authored by Gregory Touhill and Larry Clinton for the National Association of Corporate Directors explains, quantum computing's potential to break widely used cryptographic systems—including RSA and Elliptic-Curve Cryptography (ECC)—makes it one of the most significant emerging risks in cybersecurity governance. Many experts forecast that "Q-Day," the point at which quantum computers can break current public-key encryption, will likely arrive before the end of this decade.
The immediate danger, however, does not wait for Q-Day. Adversaries may already be "harvesting now, decrypting later"—collecting encrypted data today with the expectation of unlocking it once quantum capability matures. This makes data encrypted today vulnerable to future decryption, and it is especially relevant for sensitive information with long shelf lives, such as intellectual property, personal records, medical information, and national infrastructure data, as the Swiss Cyber Institute's guide for non-technical leaders notes.
The scale of the exposure transforms this from a technical curiosity into a strategic problem. Many organizations rely on public-key cryptography in numerous, often uncataloged, systems. If these cryptographic systems are not identified, prioritized, and migrated to quantum-resistant alternatives, quantum computing could lead to widespread security breaches, operational disruptions, financial losses, and compliance failures. The exact timeline for cryptographically relevant quantum computers varies, but the risk is near-term precisely because the data being stolen now has a long life.
Government Mandates and Timelines for Post-Quantum Cryptography
The transition is no longer voluntary guidance. In August 2024, NIST finalized three post-quantum cryptographic standards—FIPS 203, 204, and 205—covering ML-KEM, ML-DSA, and SLH-DSA. According to Fortinet's security guidance, these are binding standards, and organizations are expected to begin migration immediately. A hybrid encryption approach, combining classical and post-quantum algorithms, is described as the recommended first step for enterprises beginning their PQC migration without disrupting existing infrastructure.
Several dated milestones now anchor enterprise planning. The Quantum Computing Cybersecurity Preparedness Act, reinforced through OMB M-23-02, requires federal agencies to complete cryptographic inventories and prioritize PQC migration. On January 1, 2027, the NSA's CNSA 2.0 mandate requires that all new National Security Systems be quantum-safe. In the EU, a coordinated roadmap running from 2026 to 2035 requires member states to submit PQC strategies by the end of 2026, complete high-risk migrations by the end of 2030, and reach full compliance across all sectors by the end of 2035.
Even organizations outside these direct mandates will feel the pressure. Fortinet notes that the FBI, NIST, and CISA have designated 2026 the Year of Quantum Security, and that organizations delaying a quantum-safe posture risk regulatory non-compliance, data breaches, and reputational damage. Customers, regulators, and partners increasingly expect organizations to understand emerging risks and act before damage occurs, as the Swiss Cyber Institute's Adolfo Castelli observes—early, measured steps signal competence and shape trust.
Building Your PQC Migration Roadmap: A Phased Approach
The most important mental shift for IT leaders is that quantum readiness is not a single encryption swap. Palo Alto Networks frames it as a phased security modernization effort requiring visibility, governance, prioritization, testing, migration, and ongoing crypto-agility. That framing matters because it changes who owns the problem: this is a multi-year program with executive reporting, not a patch deployed by one engineering team.
The foundational step is building a quantum-readiness roadmap that defines ownership, scope, milestones, and decision points. The roadmap should identify which teams are responsible for cryptographic discovery, risk assessment, vendor coordination, migration planning, and executive reporting. It should also clarify which systems and data types are most important to protect first—long-lived, high-sensitivity data deserves priority given the harvest-now threat.
The hardest prerequisite is visibility. PQShield, a post-quantum cryptography firm, identifies this as one of the biggest challenges: many enterprises do not have a complete inventory of where cryptography is used across their systems, including applications, devices, network protocols, and third-party services. Without that visibility, it is difficult to assess risk or prioritize action. Discovery therefore has to come before any migration decision—you cannot protect what you have not found.
Quantum Readiness Checklist: Your First Six Steps to PQC Migration
The checklist below organizes expert recommendations into a sequence of concrete initial actions, moving from governance through discovery, risk assessment, and early testing. Work through it in order: each step produces the information the next one depends on.
| Step | Action | What it delivers |
|---|---|---|
| 1 | Define ownership and scope | Assign teams to cryptographic discovery, risk assessment, vendor coordination, migration planning, and executive reporting; decide which systems and data types matter most. |
| 2 | Inventory cryptographic assets | A complete map of algorithms, protocols, and keys across applications, devices, network protocols, and third-party services. |
| 3 | Assess quantum risk | A prioritized view of which assets are vulnerable to quantum attacks and which long-lived data is exposed to harvest-now, decrypt-later attacks. |
| 4 | Engage with vendors | Clarity on which third-party products and services already support NIST's finalized standards and what their migration timelines are. |
| 5 | Plan pilot projects | Low-risk trials of post-quantum or hybrid encryption on non-critical systems, testing performance and interoperability before wider rollout. |
| 6 | Develop crypto-agility | Systems designed so cryptographic algorithms can be swapped easily, ensuring adaptability as standards and threats evolve. |
Steps 1 and 2 come directly from the roadmap-building guidance: ownership and scope first, because discovery cannot proceed without accountable teams, and inventory second, because risk assessment is impossible without visibility. Step 3 applies the harvest-now logic—prioritize by data lifetime and system criticality. Steps 4 and 5 reflect the recommendation that hybrid approaches let enterprises begin migration without disrupting existing infrastructure. Step 6, crypto-agility, is the end state that makes the whole program sustainable: standards may continue to evolve, and systems that can swap algorithms cheaply will not need another multi-year emergency.
Two boundaries are worth stating plainly. This is a strategic planning guide, not technical implementation documentation for specific algorithms, and it is not legal advice on compliance with any particular mandate. It also focuses on enterprise IT systems; consumer-level cybersecurity is a separate conversation.
Preparing for the Quantum Era: A Call to Action
Enterprise cybersecurity leaders and IT strategists must initiate a phased PQC migration roadmap now to mitigate harvest-now, decrypt-later risks and meet upcoming government mandates. The measurable indicator of progress is completion of a comprehensive cryptographic asset inventory and a documented PQC migration roadmap with defined ownership and milestones. Those two artifacts are achievable within a single planning cycle, and they are the prerequisites for everything else—risk prioritization, vendor conversations, and pilot testing all depend on knowing where your cryptography lives and who is accountable for it.
The deadlines give the work its shape: NIST's standards are final, the NSA's quantum-safe requirement for new National Security Systems arrives January 1, 2027, and EU member states face strategy submissions by the end of 2026. Whether or not Q-Day arrives before the end of the decade, data stolen today remains at risk for years—so the inventory you complete this quarter, not the quantum computer of the future, is the first measurable milestone in your organization's quantum readiness.
Sources
- Quantum computing security: Key risks and how to prepare — Fortinet
- Board Discussion Guide on Quantum Computing — Nacdonline
- Quantum and cybersecurity: A simple guide for non-technical leaders — Swiss Cyber Institute
- 8 Quantum Computing Cybersecurity Risks + How to Prepare — Palo Alto Networks
- Quantum Computing and Cyber Security — PQShield
