President Trump’s new executive orders are fast-tracking U.S. quantum computing development, directing federal agencies — especially the Department of Energy — to partner with industry and academia to deploy next-generation capabilities at scale. This acceleration in quantum policy is welcome.
Important work has already been done across government, industry, and academia, but the pace has not always matched the scale of the risk. The only certainty in quantum is that timelines keep shifting, and recent developments — including the Trump administration’s Executive Order — show the window for action is narrowing.
That is why post-quantum readiness matters now. Ambition must be matched by execution and funding. Governments need to remain properly resourced to set policy, coordinate critical infrastructure, and support the wider economy’s secure transition. While the private sector will continue to invest, this cannot be left to market forces alone.
The 2031 federal target is an important milestone, but it should not be viewed as a comfortable deadline. Google has already set a 2029 timeline for its own post-quantum cryptography migration. This raises a fair question: why would any organization holding long-life sensitive data wait?
For organizations, the message is clear: this is not a problem for the next decade. Any entity protecting data that must remain private for years should be planning against a 2029–2031 window today.
The real challenge is that post-quantum migration goes far beyond adopting new algorithms. Cryptography is embedded across certificates, keys, applications, APIs, cloud services, suppliers, devices, and third-party systems. In many organizations, this estate has never been fully mapped. You cannot migrate what you cannot see.
The immediate priority is visibility: building a live inventory of cryptographic assets, PKI, certificates, keys, owners, dependencies, and renewal paths. It is like securing a building before a new class of lock-picking tools arrives. Most organizations still cannot say how many doors they have, where they are, or who holds the keys.
