A survey from DigiCert reveals a preparedness gap among many organizations as the era of quantum computing approaches. Although 69% of organizations acknowledge the risks that quantum computing presents to current encryption standards, only 5% have enacted quantum-safe encryption. 46.4% state that large portions of their encrypted information could be compromised. 

This gap suggests a disconnect, as organizations are aware of the risks of quantum computing but are lacking in meaningful action. Some reasons for this include perceived difficulty of necessary actions, uncertainty, and the belief that quantum computing will not arrive anytime soon. Even so, 69% of organizations believe quantum computing will break modern encryption within five years.

In terms of preparedness, 38% report being “very prepared” for quantum-related threats, while only 19.2% believe they are “extremely prepared.” 

“The fact that only 5% of organizations have implemented quantum-safe encryption, despite widespread awareness of the threat, should be a wake-up call,” asserts Dr. Jim Goodman, CTO at Crypto4A. “Migrating to post-quantum cryptography isn’t just a software patch — it’s a foundational shift that requires full visibility into your cryptographic environment, upgrades to hardware, migration to quantum-safe roots of trust, and cross-functional coordination. Those already underway are ahead of the curve and better equipped to handle what’s next.”