Signed June 22, the order directs the federal government to update the National Quantum Strategy, accelerate quantum computing, sensing and networking programs, strengthen domestic quantum supply chains, expand the quantum workforce and improve protections around quantum technologies. For cybersecurity leaders, the biggest takeaway is clear: post-quantum cryptography is moving from long-term planning to near-term execution.
The concern is not only when a powerful quantum computer arrives. Security experts warn that adversaries can already steal encrypted data today and hold it for future decryption, a threat commonly known as “harvest now, decrypt later.”
“The White House’s latest Executive Order on quantum innovation and cryptographic resilience underscores a growing realization across both government and industry that the window to prepare for a post-quantum world is smaller than many anticipated. We’re already in the midst of the largest overhaul of the internet’s encryption backbone in decades, with hybrid quantum-resistant standards rolling out across browsers, critical infrastructure, and enterprise environments. While high-security sectors are moving quickly toward fully quantum-safe deployments, much of the broader ecosystem remains in a transitional, hybrid state. This latest action reinforces that post-quantum security is no longer a distant concern, it is now a strategic priority tied directly to national security, economic competitiveness, and long-term digital trust. Organizations that have not begun planning and executing their migration strategies risk falling behind as the pace of adoption continues to accelerate,” said Suman Sharma, Head of PAM Engineering at Ping Identity.
The executive order also calls for agencies to assess the national security implications of increasingly powerful commercial quantum computers, including the impact on migration to post-quantum cryptography. That language gives the policy direct relevance for CISOs, infrastructure operators, cloud providers, identity teams and public sector technology leaders.
“This new executive order goes beyond the question of when quantum capabilities will mature, often referred to as “Q-Day,” and focuses on what is already at risk today. Adversaries are now collecting encrypted data, expecting that future quantum capabilities may allow them to decrypt it later.
Much of the groundwork for post-quantum cryptography has already been established. This order shifts the focus from planning to implementation by accelerating the transition to quantum-resistant encryption across high-value federal assets and other high-impact government systems. It establishes clearer timelines, reinforces accountability, and elevates post-quantum readiness from a long-term objective to a near-term operational priority.
Agencies should begin by identifying their cryptographic exposure, prioritizing high-risk systems, and aligning risk management, procurement, and modernization efforts around a phased migration strategy.
The challenge now is execution, which requires a whole-of-agency approach over multiple fiscal years. Migrating cryptography across large and complex environments is a resource-intensive undertaking. Without sustained funding, workforce development, migration expertise, and continued support for organizations such as CISA and NIST, agencies may struggle to meet the accelerated timelines and execute the transition at scale,” said Alison King, Vice President of Government Affairs at Forescout.
For agencies and enterprises, the immediate challenge is visibility. Organizations need to know where cryptography exists across applications, certificates, VPNs, APIs, identity systems, cloud environments, operational technology and embedded devices before they can migrate safely.
The order makes one thing clear: quantum security is no longer a theoretical future problem. The shift to quantum-resistant encryption is becoming a national security priority, and organizations that wait for Q-Day to begin planning may already be too late.
