While organizations focus on AI and machine learning, another technological innovation demands equal attention. Quantum computing is considered by many to be a strategic asset with economic and geopolitical implications. In fact, the U.S. government underscored the importance of preparedness for quantum computing with the June 2025 release of an executive order that framed quantum information processing as a pillar of future economic power and national security.
Corporate leaders need to assess, reevaluate and fortify existing controls to build a security strategy to defend against quantum computing threats and attacks. Proactive readiness efforts should be made now to ensure networks, critical assets and data are safe from emerging AI-accelerated quantum risks.
The Emerging Technology Threat Landscape
Like AI tools, quantum technologies require access to an organization’s networks and data. Without proper safeguards, this access becomes a critical vulnerability, exposing sensitive data and offering threat actors new vectors to compromise infrastructure, systems and data.
Just as threat actors quickly weaponized AI for cyberattacks, they will most swiftly to exploit quantum capabilities. Current public-key cryptography encryption methodologies are designed to protect sensitive information, but quantum computing has the power to crack these algorithms, rendering these encryption methodologies obsolete. Sophisticated threat actors know that encrypted data retains long-term value. Government agencies including the National Institute of Standards and Technology (NIST) have specifically warned that threat actors may already be employing a “harvest now, decrypt later” tactic, exfiltrating encrypted data today to unlock it once quantum decryption becomes viable.
Beyond decryption and data theft, quantum technologies threaten critical infrastructure. Industrial control systems, which are the underpinning of utilities like power grids, water treatment facilities and transportation networks, often rely on legacy encryption. Similarly, critical military systems that depend on cryptographic keys may be vulnerable to quantum threats. These risks are compounded by the race to be the first to develop practical quantum capabilities as the first entity to do so will gain a competitive and geopolitical advantage.
Balancing Technological Advancement and Security Resilience
To integrate new solutions, organizations increasingly rely on third-party vendors. While these partnerships offer transformative potential like enhancing efficiency, decision-making and customer engagement, they also introduce significant cyberrisks. Third-party providers often have access to sensitive corporate data, proprietary algorithms and critical infrastructure, yet may possess weaker cybersecurity defenses than the organizations they serve. New dependencies created by cloud platforms, specialized hardware, software providers and research partners all create additional access points for threat actors. This disparity introduces vulnerabilities across the supply chain.
Organizations developing their own quantum capabilities need to consider that these systems rely on complex supply chains and operational technologies that are exceedingly vulnerable to cyber threats. In the race to innovate and remain competitive, organizations must not lose sight of the security implications. Implementing emerging technologies without proper safeguards expands the attack surface and risks handing threat actors the very tools they need to conduct attacks. Balancing innovation with rigorous risk management will be a requirement for safely navigating the quantum computing era.
Preparing Early is Key
While the timing surrounding widespread adoption of quantum technologies remains uncertain, organizations that have not started preparing are already at risk. Transitioning to post-quantum cryptography (PQC) encryption standards requires significant time, financial investment and technological development. Cryptographic migrations can take years, and sensitive data may need to remain protected for decades, so it is imperative to begin building a transformation roadmap now.
In August 2024, NIST released its first three post-quantum cryptography standards, widely regarded as best practice and available for implementation today. NIST continues to expand these frameworks and released working drafts of post-quantum cryptography updates for personal identity verification (PIV) standards in June 2026. Adopting these standards is a critical first step toward quantum-resistant cryptography. Beyond adhering to the NIST standards, organizations should take these actions:
- Understand the risks. Every organization has a unique risk profile. Leaders should scan all systems, algorithms and cryptography to identify potential vulnerabilities to quantum computing. A comprehensive assessment must evaluate governance, policies, employee awareness and stakeholder alignment to build a robust risk management framework. Creating a cryptographic inventory allows an organization to understand all their encryption tools and algorithms ahead of PQC implementation.
- Develop a strategic roadmap. A thorough quantum readiness assessment will reveal security gaps and high-risk areas. Use these insights to develop a strategy that prioritizes systems based on data sensitivity and longevity. An actionable plan to achieve quantum resilience should set clear milestones and timelines while aligning with evolving regulatory standards, including the piloting of mitigation approaches now.
- Ensure the proper budget: Protecting networks from quantum threats requires dedicated security spending. Leaders must forecast the costs of mitigating quantum risks and incorporate them into future budgets. Executive buy-in is essential to secure the necessary resources.
- Lead with security: As organizations adopt new technologies, security must remain at the forefront. Cryptographic agility should be built into all modernization efforts, and external vendors should be required to provide their PQC roadmaps prior to onboarding. Organizations can prevent threat actors from exploiting new vulnerabilities by identifying potential third-party risks, data privacy concerns and expanded attack surfaces before deployment.
- Leverage external resources: Quantum computing is highly scientific and rapidly evolving. Organizations should engage third-party PQC experts to assess their networks and provide tailored recommendations for migrating solutions and fortifying quantum protections.
As quantum computing becomes mainstream, the urgency to prepare is growing. While AI-readiness is critical, it is not a substitute for a tailored quantum security strategy. By acting now and integrating post-quantum readiness into core security processes, organizations can stay ahead of the threat before it arrives.