Only half of organizations across North America and Europe are geared up for looming quantum cybersecurity threats, with some even thinking dangers are being exaggerated.
A new survey from Keyfactor revealed that nearly half (48%) aren't ready for the challenges posed by quantum computing, which will render public-key cryptography obsolete. Mid-sized organizations appeared particularly vulnerable, with 56% saying they weren't prepared.
While 42% of cybersecurity leaders said they were actively addressing quantum risk, 33% plan to respond when the risks are more immediate, 24% are waiting to see what actions other companies take, and 2% have no plans to address risks at all.
It's all about perception, however. Companies that view post-quantum cryptography (PQC) as a significant undertaking were more than twice as likely to be taking steps now, with 49% doing so, compared with just 24% of those that consider the risks to be minor or overstated.
“Cryptography is the critical infrastructure of our digital world — it’s what keeps data, systems, and trust intact. But that infrastructure is under threat. Cryptographically relevant quantum computers are coming, and when they do, today’s encryption will break,” said Jordan Rackie, CEO of Keyfactor.
“Our research shows that while awareness is growing, action is lagging,” Rickie added. “Organizations that treat PQC as a strategic priority today will be the ones who lead tomorrow — in security, resilience, and digital trust.”
Quantum cybersecurity threats are on the radar for some
Notably, at nearly half (46%) of companies, cybersecurity teams are leading the charge on championing PQC preparedness, followed by the C-suite at 33%, and board members at 22%.
The main driver for action is, unsurprisingly, cybersecurity, cited by 54%. However, half cited enhanced customer trust, 49% reduced cyber insurance premiums, and 48% a competitive edge.
The challenges, meanwhile, are being exacerbated by a lack of skilled personnel, limited time, and competing priorities, both cited by four-in-ten, with unclear industry standards just behind at 39%.
“Post-quantum cryptography is a once-in-a-generation opportunity to rebuild the foundation of digital trust,” said Chris Hickman, CSO at Keyfactor.
“It will require a full-scale transformation in how we protect every encrypted interaction, file, and transaction – past, present, and future. This transition is about showing leadership, driving innovation, and building a security posture that can stand the test of time.”
Earlier this year, the UK's National Cyber Security Centre (NCSC) published a timeline it said organizations should follow to prepare themselves for quantum threats.
Aimed mainly at large organizations, it warned they should have identified which cryptographic services need upgrades and created a migration plan by 2028.
Similarly, the cybersecurity agency urged enterprises to carry out high-priority upgrades by 2031, refining their plans as PQC evolves. Meanwhile, by 2035 they should have migrated completely to PQC for all systems, services, and products.
Make sure to follow ITPro on Google News to keep tabs on all our latest news, analysis, and reviews.
MORE FROM ITPRO
- RSAC in focus: Quantum computing and security
- The quantum computing sector needs to cut the hype and focus on responsible development
- Preparing for the quantum computing revolution
-
Microsoft could be preparing for a crackdown on remote workNews The tech giant is the latest to implement stricter policies around hybrid working without requiring a full five days in the office
-
JetBrains CEO on how developers must transform with AIInterview There may still be a place for strong developer progression in the age of AI, if workers can adapt to rapid changes
-
US federal judiciary agency hit by 'escalated cyber attacks' which exposed highly sensitive dataNews The agency says it plans to step up cybersecurity capabilities in the wake of the incident
-
Nearly one-third of ransomware victims are hit multiple times, even after paying hackersNews Many ransomware victims are being hit more than once, largely thanks to fragmented security tactics
-
Millions of Dell laptops are are at risk thanks to a Broadcom chip vulnerability – and more than 100 device models are impactedNews Widely used in high-security environments, the PCs are vulnerable to attacks allowing the theft of sensitive data
-
Cybersecurity teams are wasting time, money, and effort dealing with tool sprawl and ‘multi-vendor ecosystems’News Tool sprawl is a problem that just won't go away for security teams
-
AI breaches aren’t just a scare story any more – they’re happening in real lifeNews IBM research shows proper AI access controls are leading to costly data leaks
-
75% of UK business leaders are willing to risk criminal penalties to pay ransomsNews A ransom payment ban is a great idea - until you're the one being targeted...
-
Bitdefender targets security gaps with new Cybersecurity Advisory ServicesNews The security vendor has launched a range of new services that include advisory retainers and strategic security guidance
-
‘Polyworking’ is a cybersecurity nightmare waiting to happenNews Particularly popular with Gen Z, so-called polyworking brings huge cybersecurity risks
