Post-quantum regulations converge on 2030 but split on scope
Post-quantum regulations are turning a distant cybersecurity threat into concrete deadlines. Although governments are clustering around 2030, differences in scope leave multinational organizations facing multiple migration paths. Australia is pursuing complete migration, while Scandinavian and Baltic countries are generally following European Union timelines for roadmaps and high-risk systems,…
Post-quantum regulations are converging on a 2030 deadline, but the scope of these regulations varies across countries, leaving multinational organizations with multiple migration paths. Australia aims for complete migration, while Scandinavian and Baltic nations align with European Union timelines for roadmaps and high-risk systems.
In the U.S., Executive Order 14412 mandates federal agencies to assign post-quantum cryptography migration leads and transition high-value and high-impact systems to PQC by Dec. 31, 2030. Naomi Wynn, CEO of National Energy Public Key Infrastructure (NEPKI), and Jostein Stokkan, product manager at Atea Norge AS, spoke about these developments at DigiCert’s World Quantum Readiness Day.
Wynn emphasized that Australia is "leading the charge" in regulatory compliance, while Stokkan noted potential challenges from different post-quantum standards, which could require organizations to accommodate changing algorithms and requirements. Organization across jurisdictions may need to adapt to evolving encryption methods, but uncertainty remains about implementation details.
Wynn expects improved guidance to emerge next year, emphasizing that there is no one-size-fits-all approach to migration.
Written by urgent.news from SiliconANGLE's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
