The Time Is Now For Quantum Computing Preparation

Forbes

02-04-2025

Insights from Chris Dimitriadis, Chief Global Strategy Officer, ISACA.
Quantum computing is commonly characterized as an emerging trend to be on the lookout for in the future. The trouble is, nobody is certain when that future will arrive—and it may be much sooner than most people anticipate.
According to IBM, "Quantum computing is an emergent field of cutting-edge computer science harnessing the unique qualities of quantum mechanics to solve problems beyond the ability of even the most powerful classical computers."
While quantum is going to evolve computing to the next level, enabling innovation in several industries and accelerating AI sophistication to unprecedented levels, it also comes with problems, one of which relates to cryptography. Large-scale quantum computers will be able to break existing public key infrastructure (PKI), turning our existing cryptosystems useless and compromising the confidentiality and integrity of communications and data.
The problem definition is simple. The global digital economy relies on cryptography, which will become obsolete in the post-quantum era. The transition from pre- to post-quantum cryptography is not an easy task. We need to prepare for a post-quantum future before it's too late.
Cryptography is a foundation of cybersecurity and shapes our lives as we know them—it's present in all sectors, from financial services to the automotive industry. Any public key cryptographic protocols that exist now will be made redundant when quantum computing becomes the norm. Imagine banking transactions, e-commerce, email systems, Industrial IoT, or mobile communications without security in place, or digital identities, websites, devices, or user authentication being compromised. With this in mind, governments and organizations must start mapping their cryptographic assets now and begin to plan for the migration to post-quantum cryptography.
Unlike when a major regulation or policy comes into effect, when there is a clear date to work toward, the so-called Q-Day—when quantum computers will be able to crack standard encryption—comes with no guaranteed timeline. While it's generally estimated that commercial quantum computing is about a decade away, nobody can say with certainty when quantum might upend our day-to-day lives. Much like we have witnessed in recent years with artificial intelligence, innovation in the quantum space has the potential to accelerate forecasted timelines, and the resulting impact on cryptography and security would be severe.
In addition to the security impact, there are many other ways in which quantum computing could be highly consequential, ranging from the positive (speeding up computational tasks, enabling new products and services) to the alarming (major disruption to existing business models, presenting new regulatory and compliance challenges). It is also worth thinking through the potential ramifications of the intersection of quantum computing and AI, in which the potency of quantum computing could be further supercharged by AI's learning and pattern recognition capabilities.
Although the various possibilities of quantum's aftermath can feel overwhelming to consider, a great way to lessen anxiety is to begin preparing. There are many steps organizations can take to begin positioning themselves for the implications of quantum computing, such as:
Governments also will have an important role to play. Many governments might not be prioritizing quantum now, but they should consider being more proactive, as this is not something that can be handled reactively given the massive impacts. Foundations must be laid imminently in order to be able to handle the transition when it does eventually happen.
There have at least been some signs of progress, including the passage of the Quantum Computing Cybersecurity Preparedness Act in the United States. The act emphasizes collaboration with the National Institute of Standards and Technology (NIST), which has been leading efforts to develop and standardize post-quantum cryptographic algorithms. NIST has already published FIPS 203, describing a new algorithm that protects from quantum attacks, as well as SP 800-227 (draft) to suggest a resistant key encapsulation mechanism (KEM) toward establishing shared secrets to enable secure transactions and authentication in the post-quantum era.
The quantum era could be approaching faster than many expect, and its implications—especially in a security context—are too significant to ignore. With proactive preparation, risks can be mitigated and possibilities to leverage its positive potential can be leveraged. Organizations and governments should begin integrating quantum considerations into their strategies, investing in post-quantum cryptography, and providing ongoing training to their security professionals. The foundations laid now will dictate whether a quantum-powered future is defined more by peril or by possibility.
Forbes Technology Council is an invitation-only community for world-class CIOs, CTOs and technology executives. Do I qualify?