NASCIO: States shouldn’t wait to start preparing for cyber risks posed by quantum computing

State governments need to begin preparing now for the cybersecurity risks posed by eventual breakthroughs in quantum computing, according to a new report from the National Association of State Chief Information Officers.  

The report released Tuesday argues that, though quantum computers capable of breaking today’s widely used encryption methods have not yet emerged, it’s time states begin preparing their systems by assessing existing vulnerabilities and developing a phased migration plan to systems that are capable of withstanding these threats. Quantum computing introduces a number of serious cybersecurity challenges for states, threatening the security of sensitive information, digital identities, government transactions and critical infrastructure, the report says. 

Though the topic hasn’t yet risen to the level of a top 10 CIO priority nationally, the recent results of NASCIO’s annual State CIO Survey suggest states are beginning to recognize the need to prepare for quantum-related cybersecurity threats. Of the responding state chief information officers, 10% identified quantum computing as one of the most impactful emerging technologies over the next two to three years.

Despite this acknowledgement, 73% of state CIOs said in the survey that their states were monitoring quantum computing developments, but had taken no formal action. Just 14% of state CIOs said a post-quantum cryptography or quantum-safe security initiative was underway in their state.