The United Kingdom’s National Cyber Security Centre has released new guidance to help organizations prepare for the security risks posed by future quantum computers. The guidance highlights the importance of post-quantum cryptography, a new type of encryption designed to protect sensitive data from future quantum computer attacks.
The NCSC recommends a three-phased approach to PQC migration. By 2028, organizations should identify systems requiring upgrades and develop a migration plan. Between 2028 and 2031, they should implement upgrades and adjust plans as PQC develops. Finally, from 2031 to 2035, organizations should complete their migration to PQC across all systems, services and products.
According to the center, while current encryption methods rely on mathematical problems difficult for classical computers to solve, quantum could potentially break this encryption much faster. PQC aims to mitigate this threat by using algorithms resistant to attacks from advanced quantum computers.
The guidance primarily targets large organizations, operators of critical national infrastructure and companies with special IT systems. For small and medium-sized enterprises using standard IT products, the migration is expected to be more straightforward and seamless through vendor updates.
NCSC Chief Technical Officer Ollie Whitehouse said quantum computing will revolutionize technology. “Our new guidance on post-quantum cryptography provides a clear road map for organizations to safeguard their data against these future threats, helping to ensure that today’s confidential information remains secure in years to come.”
This new guidance is part of the U.K. government’s commitment to quantum research and development. In January, the U.K. and Canada announced over $7 million in funding for collaborative research projects in quantum communication security, quantum internet development and quantum sensors for medical applications. This joint effort aligns with London’s National Quantum Strategy, a decade-long plan to transform the nation into a “quantum-enabled economy.”