How ready are organisations for post-quantum cryptography?

What the research shows

A large enough quantum computer would break the public-key cryptography that protects most digital communications and signatures today. Because encrypted data can be stolen now and decrypted later, governments have set timelines for moving to post-quantum cryptography, which uses algorithms designed to resist quantum attacks.

The UK's National Cyber Security Centre has set three milestones. By 2028, organisations should define their migration goals, carry out a full discovery of the services and infrastructure that depend on cryptography, and build an initial plan. By 2031 they should complete their highest-priority migrations and refine the plan into a full roadmap. By 2035, migration of all systems, services and products should be complete.

EU Member States agreed a coordinated roadmap in June 2025. By the end of 2026 they should complete the groundwork, including inventories of cryptographic assets and dependency maps that cover supply chains. By the end of 2030, all high-risk use cases should have a quantum-safe upgrade path, and quantum-vulnerable public-key mechanisms should no longer be used on their own. By 2035, medium-risk use cases should also have moved, with as many systems as possible on hybrid or fully standardised post-quantum cryptography.

Visibility is the first gap. In IBM's 2026 breach study, only 34% of breached organisations had visibility into their cryptographic assets, and 37% encrypted sensitive data both at rest and in transit.

The effort differs by organisation. The NCSC expects migration for smaller organisations that mainly use commodity IT to happen largely through vendors' updates, while its guidance is aimed at large organisations, operators of critical national infrastructure and companies with bespoke IT, which need their own programmes. Inventories, supplier requirements and testing all take time, so the early discovery milestones are where most organisations should focus now.

What comes next

• End of 2026: EU Member States complete cryptographic inventories and begin transition planning.
• 2028: the NCSC expects discovery and an initial migration plan to be complete.
• 2030 to 2031: high-risk and highest-priority systems move to quantum-safe cryptography.
• 2035: full migration in the UK, and medium-risk uses in the EU.

What it means for leaders

• Build an inventory of where and how cryptography is used, including in suppliers' products.
• Add post-quantum readiness to procurement and contract requirements.
• Prioritise data and systems that must stay confidential beyond 2030.