G7 urges governments to accelerate post-quantum encryption plans

The G7 has published a call to action urging governments to launch national strategies dedicated to the transition to post-quantum encryption, according to reporting from Infosecurity Magazine. The guidance emphasises the need for fast-track implementation of quantum-safe cryptographic standards, warning that adversaries may already be harvesting encrypted data now with the intention of decrypting it once quantum computing capabilities mature. The G7 statement reflects growing international concern that the window for proactive cryptographic migration is narrowing, and that organisations which delay planning risk being unable to protect sensitive data retroactively once quantum decryption becomes feasible.

Why this matters for UK organisations

Post-quantum cryptography is not a distant future concern, it is a current planning requirement. The US National Institute of Standards and Technology has already published finalised post-quantum cryptographic standards, and the expectation is that organisations will begin transitioning critical systems over the next few years. For UK businesses, this means understanding where long-lived sensitive data is stored, what cryptographic algorithms are currently protecting it, and what the migration path looks like for replacing those algorithms with quantum-resistant alternatives. The risk is not that quantum computers will break encryption tomorrow, but that encrypted data captured today could be decrypted in the future, which makes this a data lifecycle and records management issue as much as a cryptographic one. Organisations that handle health records, financial data, intellectual property, government contracts or any other data with long-term sensitivity need to begin planning now.

What to review

Begin reviewing your cryptographic inventory to identify where long-lived sensitive data is stored, what algorithms are protecting it, and what the migration path looks like for transitioning to post-quantum cryptographic standards over the next few years. This is not a project that can be completed quickly once quantum threats are imminent; it requires multi-year planning, testing and coordination across infrastructure, applications, third-party services and supply chains. Engage with your technology vendors to understand their post-quantum roadmaps, and ensure that cryptographic resilience is part of your long-term risk management and technology strategy. Consider whether your organisation has the capability to identify and prioritise which data needs quantum-safe protection first, and who is accountable for managing the transition.

Source: Infosecurity Magazine