Preparing for Post-Quantum Cryptography: Building a Practical Roadmap
TechTarget, Tuesday, August 19th, 2025
Quantum readiness starts with cryptographic discovery, since most organizations lack a usable inventory.
DigiCert's Rich Hall notes the PQC conversation has shifted from whether to prepare to how quickly organizations can execute a migration expected to take years, with Google and Microsoft pointing to 2029 and a US executive order reinforcing the timeline.
Gartner's 2026 CISO survey found fewer than one in four organizations have made measurable progress and only 8% have a usable cryptographic inventory.
Harvest now, decrypt later attacks make the risk immediate, and 84% of organizations believe some encrypted data is already vulnerable, with financial records and private keys most at risk. Discovery should be the first stage of any readiness program, followed by prioritizing systems protecting long-lived data and building crypto-agility.