Why Do Organizations Need PQC Assessment in 2026?

Introduction: A Quantum Countdown for Cybersecurity

In 2026, cybersecurity leaders face a turning point that has moved from theoretical to operational. NIST finalized its first three post-quantum cryptography (PQC) standards in August 2024. NSA CNSA 2.0 requires new National Security System acquisitions to support PQC algorithms as of January 2027. RSA-2048 and ECC P-256, the algorithms protecting the vast majority of today’s encrypted communications, are designated for deprecation by 2030. And nation-state actors are assessed to be archiving encrypted data today for future quantum decryption. Organizations that have not yet conducted a PQC assessment need to do so now. Not to prepare for a future threat, but to address an active compliance gap and a data exposure risk that is already present. For Chief Information Security Officers (CISOs) in industries like finance and healthcare, this means now is the time to assess and plan for post-quantum cryptography (PQC). Organizations that start their PQC assessment and migration now will be far better positioned to avoid chaos and high costs down the road.

This blog explains why PQC assessments are imperative in 2026, covering the quantum threats to current cryptography, the Harvest Now, Decrypt Later risk, the current standards (NIST FIPS 203/204/205 finalized August 2024, CNSA 2.0, NIST IR 8547), regulatory drivers in finance and healthcare, and a complete roadmap for quantum readiness. For the technical explanation of how quantum computers break RSA and ECC, see What Is Quantum Computing and Why Does It Threaten Encryption.

The Urgency of Post-Quantum Cryptography in 2026

By 2026, post-quantum cryptography is no longer a far-off concern; it is a present-day strategic priority with binding regulatory deadlines and an active data exposure threat. Quantum computing leverages quantum mechanics to perform computations at speeds infeasible for classical computers. While this promises great benefits for science and industry, it also presents a monumental security threat.

Experts warn that a cryptanalytically relevant quantum computer (CRQC) will be capable of breaking essentially all of today’s widely used public-key cryptography. In a 2022 U.S. National Security Memorandum, the White House cautioned that a quantum computer of sufficient size and sophistication will be capable of breaking much of the public-key cryptography used across the United States and around the world, jeopardizing everything from military communications to financial transactions and critical infrastructure controls.

The timeline is tightening. NIST has announced that algorithms including RSA, Diffie-Hellman, elliptic-curve cryptography (ECC/ECDSA), and EdDSA will be deprecated by 2030 and disallowed after 2035. This aligns with U.S. National Security Memo NSM-10, which targets 2035 for federal systems to be quantum-resistant. The world has a shrinking runway to replace vulnerable encryption, and a PQC assessment in 2026 provides the lead time to do it without compression.

Quantum Computing Threats to Current Cryptography

Shor’s algorithm, which allows a quantum computer to factor large numbers and compute discrete logarithms exponentially faster than any classical method, directly threatens RSA (which relies on the difficulty of factoring) and ECC (which relies on discrete log problems). These algorithms underpin digital security for everything from bank websites to medical device firmware. A quantum computer of sufficient scale running Shor’s algorithm could break RSA-2048 encryption. No feasible increase in key size helps against a quantum attacker using Shor’s algorithm; similarly, ECDH and ECDSA would be defeated, undermining the authentication and key exchange mechanisms that secure internet traffic, financial transactions, and healthcare communications.

Symmetric cryptography (AES) and hash functions are less vulnerable. Grover’s algorithm provides a quadratic speedup for brute-force attacks, effectively halving the security bit strength of a symmetric key. Thus AES-256 still provides approximately 128-bit security against quantum attacks, which is considered acceptable. AES-256 is the recommended choice for post-quantum contexts; AES-128 provides a reduced security margin. Current hash functions like SHA-256 and SHA-3 are also believed to remain secure against known quantum techniques.

The real crisis is with public-key (asymmetric) cryptography: RSA, ECC, Diffie-Hellman, and DSA all fall to Shor’s algorithm. These algorithms pervade security architecture from TLS certificates and VPNs to blockchain signatures and the secure boot process of medical devices.

Harvest Now, Decrypt Later: Today’s Threat, Not Tomorrow’s

One might be tempted to think that if large-scale quantum computers do not yet exist, organizations can wait a bit longer. The answer from security experts is No, largely due to the Harvest Now, Decrypt Later (HNDL) threat model. This refers to adversaries stealing encrypted data today and storing it, knowing that in the future they will have the quantum tools to decrypt it.

Even if an attacker cannot read certain sensitive records now, they may be stockpiling encrypted bank records, customers’ personal data, or patients’ health information with the intention of unlocking it once quantum decryption is feasible. CISA, NSA, and NIST jointly stated in 2023 that cyber threat actors could be targeting data today that would still require protection in the future, using a catch now, break later or harvest now, decrypt later approach. For industries like healthcare, where patient records may retain value for a lifetime, or financial services, where certain transactions and communications must stay secure for many years, quantum risk is a time bomb with an unknown but finite fuse.

Many organizations also have long technology refresh cycles; critical banking systems or medical devices might be in service for 10 to 20 years. If those are built with only classical encryption, they could become security liabilities in their operational lifetime. The sensitive data secured today must be protected against the capabilities of tomorrow.

Current Standards and Deadlines: What Organizations Must Meet

NIST’s Post-Quantum Cryptography Standards (Finalized August 2024)

NIST finalized three PQC standards in August 2024, marking a historic milestone: for the first time, official standards for quantum-resistant encryption and signatures exist, providing a clear path for vendors and organizations to implement PQC:

• FIPS 203 (ML-KEM): Module-Lattice-Based Key Encapsulation Mechanism, based on CRYSTALS-Kyber. The replacement for RSA key transport and ECDH in key exchange.
• FIPS 204 (ML-DSA): Module-Lattice-Based Digital Signature Algorithm, based on CRYSTALS-Dilithium. The primary replacement for ECDSA and RSA signatures.
• FIPS 205 (SLH-DSA): Stateless Hash-Based Digital Signature Algorithm, based on SPHINCS+. A conservative alternative whose security rests on hash function hardness rather than lattice problems.

NIST also selected HQC in March 2025 as a second KEM based on error-correcting codes rather than lattice problems, providing a non-lattice backup to ML-KEM. HQC standardization is ongoing. FIPS 206 (FN-DSA based on FALCON) is under development with finalization expected 2026 to 2027. NIST IR 8547, published November 2024, designates RSA-2048 and ECC P-256 for deprecation by 2030 and full disallowance by 2035.

NSA’s CNSA 2.0 Suite and Deadlines

In September 2022, NSA announced the Commercial National Security Algorithm Suite 2.0 (CNSA 2.0), its blueprint for cryptography to protect classified and national security systems in the quantum era. CNSA 2.0 specifies ML-KEM for key exchange and ML-DSA for digital signatures, as well as hash-based signature schemes for specific use cases. Key deadlines include:

CNSA 2.0 Timeline: New NSS acquisitions must support CNSA 2.0 as of January 2027. Software/firmware signing and networking equipment must use CNSA 2.0 exclusively by 2030. All NSS must use CNSA 2.0 by December 31, 2031. Operating systems must reach exclusive use by 2033. NIST IR 8547: RSA-2048 and ECC P-256 deprecated by 2030; disallowed by 2035.

CNSA 2.0 requirements flow down through the federal supply chain, meaning commercial organizations supplying products or services to NSS environments inherit PQC compliance obligations regardless of whether they handle classified data directly. For organizations inside the federal supply chain, 2026 is the year to complete assessment and begin migration planning to meet January 2027 acquisition requirements.

International and Industry Standards

Beyond NIST and NSA, there is global momentum on PQC standards. ISO/IEC is incorporating quantum-safe cryptography into its standards portfolio. The European Union issued Recommendation EU 2024/1101 in April 2024, outlining a coordinated roadmap for member states to transition to PQC for protecting critical digital infrastructures, with a target of 2030 for widespread PQC adoption. Industry groups are likewise proactive. Standards for implementing PQC in internet protocols are underway; the IETF is working on hybrid TLS and VPN standards that combine classical and PQC algorithms for the transition period.

Regulatory Drivers in Finance and Healthcare

Financial Services: Protecting the Integrity of Finance

Financial institutions have long been guardians of data confidentiality and transaction integrity. With quantum computing on the horizon, regulators and industry consortia are urging finance to lead the charge on PQC adoption. The Financial Services Information Sharing and Analysis Center (FS-ISAC) released a whitepaper on Building Cryptographic Agility in the Financial Sector, stating that the move to crypto agility must begin immediately because quantum computing is likely to make a commonly used class of cryptography algorithms insecure in the next few years. The whitepaper, authored by experts from major global banks, frames crypto agility as a business continuity and trust issue.

Europol’s Quantum Safe Financial Forum (QSFF) issued an urgent call to action for the financial sector to coordinate a transition to PQC together, warning that failure to start now could lead to a rushed and costly transition later with higher operational risks. One of the QSFF’s key recommendations is to use hybrid cryptography, combining classical and quantum-safe algorithms as a stepping stone, allowing gradual migration while maintaining interoperability.

In practice, bank examiners expect institutions to include quantum risk in their strategic technology planning, ensuring new systems are crypto-agile and setting aside budget for PQC upgrades. Forward-looking banks are already inventorying their cryptography and running proof-of-concepts with PQC. Waiting until regulations mandate a switch could be perilous given the lengthy timelines involved in replacing cryptographic systems across global financial networks.

Healthcare: Safeguarding Patient Data and Devices

The healthcare sector faces a unique dual imperative: protecting highly sensitive personal data and ensuring the safety and efficacy of life-critical devices. The U.S. FDA updated its medical device cybersecurity guidance in 2023 to explicitly require manufacturers to ensure crypto agility throughout a product’s use. Under Section 524B of the FD&C Act, the FDA can refuse approvals for new medical devices that do not meet cybersecurity expectations, specifically citing the use of deprecated cryptographic algorithms or lack of a forward-looking upgrade plan as grounds for rejection. In practice, device submissions have been flagged or delayed due to cryptographic deficiencies such as using outdated algorithms or not documenting key management and update processes.

HIPAA mandates protection of electronic health information; while it does not specify encryption algorithms, it effectively requires that encrypted ePHI stays confidential. If quantum computing threatens encryption protecting years of stored patient records, healthcare entities could face compliance and liability issues for breaches if they do not transition to stronger cryptography in time. The long retention periods of medical records, often decades or a lifetime, mean healthcare data stolen now could still be sensitive when quantum attacks emerge.

Leading medical device manufacturers are implementing Cryptographic Bills of Materials (CBOMs), an inventory of all cryptographic components in a device including readiness for PQC, to streamline regulatory approval and internal upgrades. As the industry notes, with NIST committing to deprecate non-quantum-resistant cryptography by 2030, device manufacturers need to act now to avoid product delays, expensive redesigns, or long-term risk exposure.

Roadmap for PQC Readiness: A Strategic Approach

Facing the quantum threat can seem daunting, but CISOs can tackle it with a structured, strategic approach. A PQC readiness assessment should lead into a multi-year roadmap for migration. Below is a framework that cybersecurity leaders in finance, healthcare, and other sectors can follow:

1. Build Awareness and Executive Support

   Begin by educating stakeholders and senior management about the quantum risk and why action is needed now. Present the credible timelines: NIST’s 2030 deprecation deadline, CNSA 2.0 January 2027 requirement for new NSS acquisitions, and the HNDL threat to illustrate current exposure. Quantum risk should be framed as an operational resilience issue on par with other enterprise risks. Gaining leadership buy-in ensures you will have the necessary resources and urgency across the organization.

2. Cryptographic Inventory: Know What You Have

   You cannot fix what you cannot see. Form a project team to identify all systems, applications, and devices that rely on quantum-vulnerable cryptography, including any use of RSA, Diffie-Hellman, ECC (ECDH/ECDSA), DSA, or other asymmetric algorithms. Do not forget VPN appliances, partner network connections, code signing certificates, client-side applications, IoT devices, and medical equipment. Inventory your data stores and assess how long each dataset must remain secure. Consider developing a Cryptographic Bill of Materials (CBOM) for critical systems, documenting each cryptographic component, key length, and PQC readiness status. For the full discovery methodology, see You Can’t Secure What You Can’t See and Why Your Cryptographic Inventory Is Your Master Key.

3. Assess Risk and Prioritize

   Not all crypto exposure is equal. Analyze the inventory to identify which systems and data are most critical to address first, considering the sensitivity and required secrecy lifetime of data, the criticality of the system’s function, HNDL exposure, and the feasibility and impact of upgrading. For example, a financial firm might prioritize securing inter-bank communication links and confidential client data archives, while a hospital might focus on electronic health record databases and medical device communication protocols. Also engage with vendors to understand their crypto roadmaps and PQC upgrade timelines.

4. Develop a Quantum-Readiness Roadmap

   With priorities set, create a formal migration roadmap with timelines, milestones, and resource plans for deploying PQC solutions. The roadmap should span phases including testing (pilot a PQC-enabled TLS deployment in 2026), hybrid mode (running quantum-safe algorithms in parallel with classical ones during transition), and full transition aligned to the relevant regulatory deadlines. Include contingency for updates as standards evolve, such as when NIST finalizes FIPS 206 and HQC. The plan should align with external mandates: CNSA 2.0 by the applicable deadline; NIST IR 8547 deprecation by 2030.

5. Invest in Cryptographic Agility

   A key principle throughout your roadmap should be crypto agility by design. This means building systems and applications in a way that algorithms can be changed with minimal disruption. Use modular cryptographic libraries and APIs that abstract the algorithm, so swapping RSA for ML-KEM does not require overhauling the entire system. Ensure that key management systems and Hardware Security Modules (HSMs) are compatible with larger PQC keys and different algorithm types. Some HSMs may require firmware updates or replacement to support FIPS 140-3 validated PQC algorithms; verify your HSM vendor’s roadmap now.

6. Implement and Test PQC Solutions

   Begin rolling out quantum-safe solutions in a phased manner. Start with non-production or low-risk environments to test integration, performance, and interoperability. PQC algorithms such as ML-KEM and ML-DSA produce larger key sizes and signature sizes than RSA or ECDSA, which can affect TLS handshake sizes, certificate chain sizes, and network bandwidth. Identify any bottlenecks early. Test hybrid mode deployments that run classical and PQC algorithms together, maintaining interoperability with counterparties that have not yet migrated.

7. Monitor Standards and Update Compliance Posture

   The PQC landscape will continue to evolve. Assign someone to track developments in standards, regulations, and threats. Follow NIST updates as FIPS 206 and HQC approach finalization. Watch for ISO/IEC and ETSI standards with international compliance implications. Monitor sector-specific regulatory guidance from the SEC, FDA, or HIPAA enforcement bodies as applicable. Stay ahead of regulatory tightening rather than reacting to it.

8. Collaborate and Share Knowledge

   PQC transition is an ecosystem problem. Engage in industry forums such as FS-ISAC for finance or Health-ISAC for healthcare to share experiences and solutions. Public-private partnerships are emerging to tackle quantum transition: NIST’s National Cybersecurity Center of Excellence (NCCoE) produces migration playbooks and tools. Take advantage of these resources. By working together, financial institutions can ensure that payment networks and banks migrate in sync, and healthcare organizations can push vendors and device manufacturers to deliver quantum-safe solutions on a reasonable timetable.

How Can Encryption Consulting Support PQC Transition?

If you are wondering where and how to begin your post-quantum journey, Encryption Consulting is here to support you. You can count on us as your trusted partner, and we will guide you through every step with clarity, confidence, and real-world expertise.

Cryptographic Discovery and Inventory

This is the foundational phase where we build visibility into your existing cryptographic infrastructure. We identify which systems are at risk from quantum threats and assess how ready your current setup is, including your PKI, HSMs, and applications. Comprehensive scanning covers certificates, cryptographic keys, algorithms, libraries, and protocols across your IT environment, including endpoints, applications, APIs, network devices, databases, and embedded systems. We build a detailed inventory database of all cryptographic components to serve as the baseline for risk assessment and planning.

PQC Assessment

Once visibility is established, we conduct a full PQC assessment: analyzing cryptographic elements for exposure to quantum threats, particularly those relying on RSA, ECC, and other algorithms designated for deprecation; reviewing how Public Key Infrastructure and Hardware Security Modules are configured; analyzing applications for hardcoded cryptographic dependencies; and delivering a detailed report with an inventory of vulnerable cryptographic assets, risk severity ratings, compliance gap analysis, and prioritization for migration.

PQC Strategy and Roadmap

With risks identified, we work with you to develop a custom, phased migration strategy that aligns with your business, technical, and regulatory requirements. We design systems and workflows to support easy switching of cryptographic algorithms as standards evolve. We update security policies, key management procedures, and internal compliance rules to align with NIST and NSA (CNSA 2.0) recommendations. We craft a step-by-step migration roadmap with short, medium, and long-term goals broken down into manageable phases: pilot, hybrid deployment, and full implementation.

Vendor Evaluation and Proof of Concept

We help you identify and test the right tools, technologies, and partners that can support your post-quantum goals. We run proof-of-concept tests in isolated environments to evaluate performance, ease of integration, and fit for your use cases, and we deliver a vendor comparison matrix and recommendation report based on real-world PoC findings.

Pilot Testing and Scaling, PQC Implementation

Before full implementation, we validate everything through controlled pilots. Testing covers new cryptographic models in a sandbox environment, interoperability with existing systems and third-party dependencies, and feedback from IT and security teams. Once testing is complete, we support a smooth, scalable rollout, replacing legacy cryptographic algorithms step by step and ensuring systems remain secure and compliant. We continue to monitor performance and provide ongoing optimization to keep your quantum defense strong and future-ready.

Reach out to us at [email protected] and let us build a customized roadmap that aligns with your organization’s specific needs.

Conclusion: Ensuring Future-Ready Security Now

In 2026, we have enough information and tools to begin acting with NIST standards finalized, proven PQC algorithms available, and clear government roadmaps published but we also have a shrinking timeline before the risk materializes. For CISOs and security leaders, especially in finance and healthcare, post-quantum readiness has to become a priority alongside today’s threats. Quantum risk is an operational resilience issue, not a distant problem.

Organizations that start their PQC assessment and migration now will be far better positioned to avoid chaos and high costs down the road. By 2030, regulators will expect compliance with quantum-safe standards; early movers will meet those expectations smoothly, while laggards scramble. The transition to post-quantum cryptography is a complex journey, but it is also an opportunity: an opportunity to strengthen cryptographic foundations, modernize systems, and ensure that the critical data of financial and healthcare systems remains secure not just today, but for the decades to come. For the technical explanation of how quantum computers break encryption, see What Is Quantum Computing and Why Does It Threaten Encryption. For the essential steps and implementation checklist, see Unlocking the Quantum Era: Essential Steps for PQC Readiness.

Frequently Asked Questions

What is a PQC assessment and what does it produce?

A PQC assessment is a structured evaluation of an organization’s cryptographic environment against quantum computing threats and applicable standards. It produces: a complete cryptographic inventory; a quantum risk impact analysis; a prioritized remediation list; a compliance gap analysis against CNSA 2.0, NIST IR 8547, DORA, and PCI DSS; HSM and TLS library readiness assessment; and a phased migration roadmap.

What NIST PQC standards have been finalized and what are the deprecation deadlines?

NIST finalized FIPS 203 (ML-KEM), FIPS 204 (ML-DSA), and FIPS 205 (SLH-DSA) in August 2024. NIST selected HQC in March 2025 (standardization ongoing). FIPS 206 (FN-DSA) is under development. NIST IR 8547 designates RSA-2048 and ECC P-256 for deprecation by 2030 and disallowance by 2035. NSA CNSA 2.0 requires new NSS acquisitions to support CNSA 2.0 algorithms as of January 2027.

What is the Harvest Now, Decrypt Later threat and why does it make 2026 assessment urgent?

HNDL is the strategy of collecting encrypted data today and archiving it until a quantum computer arrives to decrypt it. It makes 2026 assessment urgent because the adversary’s collection window is already open. CISA and NSA have assessed that nation-state actors are engaged in bulk interception and archival of encrypted traffic. Any organization transmitting data that must remain confidential for more than five to ten years faces material HNDL exposure today.

Why do finance and healthcare organizations face disproportionate PQC urgency?

Finance and healthcare organizations face disproportionate urgency because of long data retention requirements combined with sector-specific regulatory pressure. The FS-ISAC has required the financial sector to begin the move to crypto agility immediately. The FDA has updated medical device cybersecurity guidance to require crypto agility and can refuse approvals for devices built solely on RSA or ECC without a PQC upgrade path.

What is the difference between PQC assessment and PQC migration?

A PQC assessment is the bounded discovery and analysis phase that produces a cryptographic inventory, quantum risk impact analysis, compliance gap analysis, and phased migration roadmap. It tells you where you are and what you need to do. PQC migration is the multi-year execution program that implements the roadmap. Assessment is the prerequisite; migration cannot be planned or scoped without it.