Nearly half of enterprises have no one leading PQC migration

Enterprises believe they are prepared for the security challenges posed by quantum computing, but gaps in ownership, testing and visibility could complicate their transition to post-quantum cryptography (PQC), according to new research from Axiad.

Who owns PQC migration? (Source: Axiad)

Organizations need to know where certificates, cryptographic keys and algorithms are used before they can plan a PQC migration. About 75% of respondents said they maintain a continuously updated inventory of these assets. However, responses about ownership and testing indicate that visibility does not always translate into migration readiness.

“PQC readiness cannot be based on what an organization believes it has under control. It has to be based on what it can actually see, verify, and act on,” said David Canellos, CEO of Axiad.

“Organizations may believe they know where their certificates, keys, and cryptographic algorithms reside, but this research shows that confidence can fall apart when you ask who owns the migration, what has actually been tested, and where the organization remains exposed. The first step toward post-quantum readiness is establishing continuous visibility into the cryptographic environment so leaders can replace assumptions with evidence.”