Plan for what comes next
Post-quantum readiness
starts with a clearer inventory.
Understand where encryption protects your organisation, what your suppliers are planning and how future upgrades fit your budget.
Discuss future planningWhat is PQC?
Post-quantum cryptography uses algorithms designed to resist attacks from future quantum computers. The transition matters for systems that rely on today's public-key cryptography, including secure connections and digital signatures.
Preparing takes time. Start by understanding your data, systems and supplier dependencies so procurement and renewal decisions can support a managed transition.
ASD's planning guidance sets an objective to complete transition by the end of 2030. That is a planning milestone in the guidance, not a blanket legal deadline for every business or a prediction that all encryption fails on that date.
Guidance reviewed 14 November 2026. Read ASD's planning guidance for its scope and recommendations.
A practical starting scope
Readiness and vendor planning
- Identify systems and information with long-term protection needs.
- Record supplier dependencies and unknowns.
- Prepare vendor questions and track responses.
- Bring findings into procurement and upgrade planning.
Specialist cryptographic engineering or assurance may require additional expertise. Scope and responsibilities are agreed before work begins.
A staged path to readiness.
- IdentifyData and protection needs
- MapSystems and dependencies
- AskSupplier plans and evidence
- PrioritiseRisk, renewal and budget
- TestCompatibility and transition
Bring better questions to your suppliers.
- Which parts of our service depend on public-key cryptography?
- What support is planned, and for which product versions?
- What evidence and dates can you provide for testing and availability?
- Will changes require new hardware, licences or service agreements?
- How will interoperability, recovery and ongoing support be tested?
Use ASD's vendor questions for a fuller discussion.
Start an inventory.
Record the service, owner, supplier, protection needs, dependencies and next action. Mark unknowns for investigation; this template does not inspect your systems.
Download inventory CSV