Quantum computing is no longer just a buzzword it’s fast becoming a disruptive force that could transform entire industries, industries from healthcare to retail.
But with that power comes a serious challenge: the encryption systems that protect our global digital infrastructure are at risk.
On the horizon is what experts call “Q-day” the moment when quantum computers will be powerful enough to break today’s encryption methods. When that day comes, data we currently consider secure could be exposed.
That’s why organizations can’t afford to wait. The time to strengthen systems and networks against this new wave of technology is now.
At a recent Financial Times roundtable in London, where I joined leaders from Kyndryl, Nokia, and several major companies across insurance, finance, and other sectors, one question came up again and again:
“Can we afford to wait?”
The consensus? No. Most leaders agree that Q-day could realistically arrive by 2030 and that’s closer than it sounds.
Here are a few key takeaways from our discussion:
Source: Kyndryl Readiness Report 2025, a global survey of C-suite and executives from 21 countries.
What are some proactive steps C-suite leaders and their businesses can take now to prepare for Q-day?
If we consider for a moment that 2030 is only a handful of years away, there are practical steps that may be taken now.The first is completing a quantum assessment. Identify the risks, categorize the exposures, and classify the findings for prioritization, planning, and budgeting. That includes sorting systems into the following categories:
Infrastructure software that we know isn’t quantum-safe and can’t be made quantum-safe.
Infrastructure that can be made quantum-safe with new software updates
Infrastructure that’s quantum safe now
Our assessments commonly include the classification of systems and services based on data sensitivity providing a guiding compass as we identify what must be protected, beginning with the most sensitive assets that oftentimes include financial records, health data or intellectual property.
What Strategic Planning and Due Diligence Questions Should the C Suite Be Ready For?
Quantum risks may sound like a problem for the future but the reality is, the time to prepare is now.
Forward-thinking leaders are already turning this “future threat” into a clear action plan today.
A Quantum Readiness Assessment can help your leadership team and board start the right conversations and take practical steps.
Here are a few key questions every C suite should be asking:
1. Which of our systems and data are most at risk from quantum attacks?
Start by identifying where your most sensitive information is stored.
Think about whether any of that data could be stolen now and decrypted later (“harvest now, decrypt later” attacks).
This gives you a good foundation for risk assessment.
2. What’s our timeline for moving to post-quantum cryptography (PQC)?
With NIST planning to phase out current encryption algorithms by 2030, companies need to act early. Build a realistic, step-by-step roadmap to transition waiting until the last minute could mean chaos and costly fixes later.
