“No organization can navigate the shift to PQC alone”
That’s according to a new report, the output of a collaborative workshop hosted by the UK National Cyber Security Centre (NCSC) and Vodafone, along with the National Cyber Advisory Board.
It was a key event, and one that involved, for the first time, a high-level collaboration of government, industry, and academia, including PQShield. Post-quantum transition is clearly an imperative that requires close co-operation between cyber security experts, teams, and business leaders, and this was a great example.
Here are our key takeaways from the workshop:
Engaging the board and building the case
- The quantum threat is a business risk and a priority that requires executive sponsorship
- A clear, phased roadmap is essential
- Prioritization of high-impact or long-lived systems strengthens the business case
Supply chain readiness
- No organization, department or entity is an island
- Third-party suppliers require early engagement and clarity of requirements
- PQC upgrades should take advantage of natural tech refresh cycles
Transparency and collaboration
- Collaboration works best when plans are published, and also helps national cyber organizations (such as the NCSC) to add guidance
- Cross-sector collaboration allows for best-practices while communicating with government ensures a consistent push towards resilience
It’s clear that there’s an interdependence required, and that the push for quantum resilience requires exactly this kind of connection and community.
The report from the workshop also recommends discovery, prioritization, and roadmap development as the first steps to take today – actions that resonate clearly with PQShield.
It was great for us to be in the room as a key provider of solutions and guidance towards PQC migration. Certainly, the NCSC and the National Cyber Advisory Board are now working to maintain momentum and continue these discussions, and we’re thrilled to be part of the conversation.
You can read the full output from the workshop here