A significant gap in preparedness for quantum threats has emerged among business leaders, according to a recent study by Bain & Company. The research reveals that a staggering 90% of executives lack a security plan to counter potential quantum-enabled cyberattacks, raising concerns about the future of data security.
As quantum technology advances, experts warn that threat actors may soon be able to decrypt sensitive information previously deemed secure. The Bain survey found that 71% of executives believe quantum-enabled attacks could manifest within the next five years, with a third predicting such incidents could occur in just three years. Despite these alarming projections, the consultancy cautioned that it may take organizations up to five years to identify and implement quantum-resistant solutions.
Facing the Quantum Challenge
The complexity of transitioning to secure systems presents a daunting challenge for many businesses. Bain’s report highlights that organizations grappling with legacy infrastructure may find themselves particularly vulnerable, making them attractive targets for cybercriminals. The report states, “It could take even longer given the scale of the problem and the complexity of identifying vulnerable systems, upgrading cryptographic infrastructure, aligning with evolving standards, and coordinating across internal teams and external partners.”
In a proactive response to these threats, some companies have begun enhancing their defenses. Cloudflare, for instance, is collaborating with Google to advance post-quantum cryptography (PQC), while Viavi Solutions is developing frameworks for deploying quantum-safe security across telecommunications and enterprise networks.
Bain emphasizes the urgency for businesses to initiate preparations in the coming months rather than delaying for years. The consultancy urges boards and executives to prioritize and allocate resources for necessary actions to mitigate this rising threat.
Industry Concerns Echoed by IT Professionals
Bain’s findings resonate with previous industry analyses regarding the potential impact of quantum computing on cybersecurity. A survey conducted by ISACA in May 2023 found that out of approximately 2,600 global IT and cybersecurity professionals, 62% expressed concerns about quantum computing’s ability to compromise encryption. Additionally, over half of the respondents (57%) acknowledged the emergence of new business risks linked to quantum threats.
Similar to Bain’s observations, ISACA’s survey revealed a troubling lack of preparedness among professionals. About 40% of respondents were unaware of their company’s plans to address quantum risks, and 41% stated they currently have no plans to tackle these potential threats. Alarmingly, only 5% indicated that they would consider addressing quantum threats as a high business priority in the near future, despite a quarter suggesting that quantum technology will be realized on an industry-wide scale within the next five years.
Rob Clyde, former ISACA board chair and chairman of Crypto Quantique, stressed the importance of immediate action. In a recent blog post, he warned, “If we don’t move now to start solving issues like re-encrypting our data, switching to new digital signatures and moving our systems over to new algorithms, we are creating problems that will become increasingly difficult to address.”
As quantum technology continues to advance, the urgency for businesses to develop comprehensive security strategies cannot be overstated. The window for proactive planning is narrowing, and organizations must act swiftly to safeguard their data and operations against the looming quantum threat.
