Most firms lack cryptographic inventories needed for quantum-safe transition
Industry surveys show organizations increasingly recognize post-quantum cryptography as a priority but have not completed the foundational step of inventorying their cryptographic assets. A DigiCert study found 87% of organizations are planning, testing or implementing PQC, yet only 44% have built transition plans or asset inventories, while Ponemon Institute research found just 43% have full visibility into their cryptographic estate. QubitAC founder Dr. Anurag Swarnim Yadav said companies across the board remain stuck in this early discovery phase.
GoKawiil's interpretation of the reporting above, not reported fact.
Without a complete map of where encryption is used—in servers, certificates, VPNs, code signing and vendor products—organizations cannot sequence or prioritize their migration work, leaving them unprepared as quantum computing capabilities reportedly advance faster than expected. The lack of a fixed deadline, unlike Y2K, may reduce urgency even though the eventual 'Q Day' threat could expose unmigrated systems retroactively through stored, later-decrypted data.
- Only 44% of organizations have PQC transition plans or cryptographic inventories despite 87% calling it a priority, per DigiCert.
- Ponemon Institute found just 43% of organizations have full visibility into their cryptographic assets.
- Experts describe the transition as a generational effort comparable to Y2K, but without a fixed compliance deadline.
Source: darkreading.com — Ericka Chickowski, 2026-11-12
Published there as: “Getting Past the Post-Quantum Cryptography Discovery Phase”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.