Enterprises Face Inadequate Preparation for Quantum Cybersecurity Hazards
Mid-sized Organizations Struggle with Quantum Cybersecurity Preparedness
A significant number of mid-sized organizations in North America and Europe are unprepared for the challenges posed by quantum computing, according to recent reports. Approximately 56% of these organizations admit they are not ready to handle the impending obsolescence of current public-key cryptography techniques.
The readiness landscape shows that nearly half (48%) of enterprises overall are not prepared for the post-quantum cryptography (PQC) transition. This is a critical concern as quantum computers will break existing encryption standards. Awareness is increasing, but action is lagging. Only around 42% of cybersecurity leaders say they are actively addressing the quantum risk now, while a significant portion plan to delay responses or wait for others to act.
The attitude toward the PQC transition strongly influences preparedness. Organizations that view PQC as a significant and urgent undertaking are more than twice as likely to be actively implementing measures (49%) compared to those who perceive the risk as minor or exaggerated (24%). This divide highlights a critical gap in strategic prioritization.
Board members are involved in PQC preparedness in 22% of companies, while cybersecurity teams are leading the charge in nearly half (46%) of companies. The C-suite is involved in PQC preparedness in 33% of companies.
Chris Hickman, CSO at Keyfactor, emphasizes that the transition to PQC is about showing leadership, driving innovation, and building a security posture that can stand the test of time. He states that post-quantum cryptography is a once-in-a-generation opportunity to rebuild the foundation of digital trust.
The UK's National Cyber Security Centre (NCSC) has published a timeline for organizations to prepare for quantum threats. Large organizations should have identified which cryptographic services need upgrades and created a migration plan by 2028. By 2035, organizations should have migrated completely to PQC for all systems, services, and products.
Organizations are motivated to address quantum risks for various reasons. Half of organizations cite enhanced customer trust as a driver, while 49% cite reduced cyber insurance premiums. Additionally, 48% view a competitive edge as a driver for addressing quantum risks. However, 24% of cybersecurity leaders are waiting to see what actions other companies take, while 2% have no plans to address quantum risks at all.
In summary, mid-sized organizations in these regions face urgent challenges and significant readiness gaps in quantum cybersecurity. The need for accelerated strategic action to future-proof digital trust and security infrastructures cannot be overstated.
- Mid-sized organizations must proactively address the looming obsolescence of current public-key cryptography techniques in the face of quantum computing, as they currently struggle with preparedness.
- The transition to post-quantum cryptography (PQC) requires a strategic prioritization and leadership from the C-suite, as it presents a once-in-a-generation opportunity to rebuild the foundation of digital trust.
- Financial incentives such as enhanced customer trust, reduced cyber insurance premiums, and a competitive edge highlight the importance of addressing quantum risks in business and technology.
