The Quantum Deadline Is Unclear. The Need to Prepare Isn't.
TechRadar, Wednesday, September 9th, 2026
Without a firm quantum deadline, CISOs should use budget cycles to fund post-quantum cryptography inventories and phased migration.
Quantum readiness remains low, with IBM's 2025 Quantum-Safe Readiness Index averaging just 25 out of 100, even as Google warns cryptographically relevant quantum computers may arrive sooner than expected and targets 2029 for its own PQC migration.
The author recommends building a cryptographic bill of materials, prioritizing systems by data value and longevity given 'harvest now, decrypt later' threats, and recognizing risks to authentication as well as data.
CISOs must frame quantum risk as a business issue shared with CIOs, procurement and executives, build crypto-agility into systems and vendor requirements, and treat limited budget cycles as the practical timeline for a multi-year migration.