industry · quantum risk

Is Government IT Quantum Proof? Public Sector PQC Risk

Risk: high · Confidence: high · Reviewed: 2026-07-19

Verdict

Government IT is not quantum-proof by policy citation alone. National memoranda raise priority; systems still need inventory, hybrid pilots, and supplier migration.

Overview

Public sector combines citizen services, internal enterprise IT, and regulated suppliers. Quantum programs should map to NSM-10/CNSA-class guidance where applicable.

Educational framing only—verify legal applicability with counsel.

Cryptographic profile

Signatures: Citizen service TLS, Cross-agency federation, Classified/sensitive network crypto as applicable
Hash: Records management integrity
Public-key exposure: Citizen data, national systems, and supplier chains under national PQC direction.

Vertical: government

What breaks

Policy documents without technical inventories
Suppliers claiming quantum-safe without evidence
Long-lived citizen archives under classical crypto

Mitigations

Crosswalk national guidance to control libraries
Supplier PQC questionnaires
Prioritize HNDL citizen and national datasets

FAQ

Does NSM-10 make us quantum-safe?

It sets direction; implementation is inventory and migration work.

Related?

/is-quantum-proof/nsm-10 and /is-quantum-proof/cnsa-pqc

Key concepts (technical dictionary)

Terms used on this page — open a definition:

Full technical dictionary →