Quantum Security Deployment Lags Despite Enterprise Planning
Event summary
- 87% of organizations are planning or testing post-quantum cryptography (PQC), but only 7% have deployed it across most digital certificates.
- Deployment increased by just two percentage points since last year's survey, highlighting an execution gap.
- 50% of organizations have conducted quantum risk assessments, while 44% have developed transition plans and created cryptographic inventories.
- Legacy complexity is now the biggest barrier to deployment (25.6%), replacing uncertainty around standards or executive support.
The big picture
DigiCert's survey reveals a growing disconnect between enterprise planning for post-quantum cryptography and actual deployment, underscoring the complexity of transitioning from traditional encryption. The urgency is heightened by concerns over harvest now, decrypt later (HNDL) attacks, with financial transaction records and banking data identified as prime targets. This execution gap could leave organizations vulnerable to future quantum computing threats, despite their awareness and preparatory efforts.
What we're watching
- Execution Risk
- How organizations will bridge the gap between planning and actual deployment of quantum-safe cryptography.
- Industry Preparedness
- Whether sectors like retail, manufacturing, medtech, and telecommunications can accelerate their readiness.
- Regulatory Pressure
- The pace at which governments will mandate quantum security standards to protect critical data.
Related topics