UK Sets Timeline for Quantum-Resistant Encryption Transition

The UK’s National Cyber Security Centre (NCSC) has released new guidance urging organisations to start preparing for the impact of quantum computing on encryption. While quantum computers are not yet widely available, they could eventually break current encryption standards, posing significant security risks.

To mitigate these threats, the UK has outlined a three-phase migration plan to post-quantum cryptography (PQC) spanning from 2028 to 2035. The first phase focuses on assessing current systems and planning upgrades, followed by executing priority migrations by 2031, and completing the transition by 2035.

Regulated industries such as finance, banking, and telecommunications are expected to lead the transition, working closely with international partners to ensure a smooth shift. Smaller organisations may experience this transition as routine updates from their providers, while larger entities will require significant investment.

Although adoption remains uncertain, regulators will play a key role in driving awareness and ensuring compliance. Preparing early will help organisations reduce risks, lower costs, and maintain security as quantum technology advances.