Federal Agencies Lagged in Quantum Defense Prep
A government audit found no federal agencies fully met three key requirements for preparing post-quantum cryptography.
Updated on Oct. 12, 2026 in Quantum Computing
Live Poll
Do you trust federal agencies to secure digital infrastructure against emerging quantum computing threats?
The Government Accountability Office reported on October 6, 2026, that none of the 24 Chief Financial Officers Act agencies fully addressed three critical post-quantum cryptography preparation requirements. The audit, conducted between February 2024 and September 2025, revealed significant barriers to security upgrades.
Why it matters
Federal agencies must modernize their systems to defend against future quantum computing threats, with billions in costs and strict deadlines looming. The lack of expertise and vendor tooling currently hinders these necessary security efforts.
The audit found that 18 agencies reported a lack of necessary cryptography expertise, while 11 agencies cited a lack of vendor pricing as a barrier to funding estimates. The Office of Management and Budget currently estimates the total cost for migrating federal systems at $7.1 billion.
The players
Government Accountability Office
This is a non-partisan legislative branch agency that provides auditing, evaluation, and investigative services for the United States Congress.
Office of Management and Budget
This executive agency oversees the implementation of the President of the United States vision across the Executive Branch.
Cybersecurity and Infrastructure Security Agency
This federal agency is responsible for protecting the nation's critical infrastructure and cyber defenses against a range of threats.
The details
Agencies were assessed on their ability to inventory systems, estimate replacement costs, and test quantum-resistant algorithms. Most agencies indicated that testing remained premature due to the current status of available vendor products.
Timeline
The Government Accountability Office conducted its audit between February 2024 and September 2025.
The report was publicly released on October 6, 2026.
Federal agencies must submit their migration plans to the Office of Management and Budget by October 22, 2026.
Post-quantum cryptography for key establishment must be adopted by December 31, 2030.
Post-quantum cryptography for digital signatures must be adopted by December 31, 2031.
The Tech Race
This audit underscores the difficulty of transitioning legacy government systems to quantum-resistant standards in the face of rapid technological evolution. It reflects the broader arms race as federal entities struggle to replace aging encryption methods with architectures capable of surviving future quantum decryption.
The inability of federal agencies to meet these standards may lead to delays in securing public data against future decryption threats. Consumers who rely on government platforms may face long-term risks if the underlying security infrastructure fails to keep pace with modern cryptographic requirements.
The takeaway
Securing federal infrastructure requires not just funding, but a significant expansion of internal technical expertise. Organizations should prioritize inventorying their current systems and mapping out clear migration pathways to stay ahead of upcoming federal security deadlines.
What happens next
Federal agencies are required to submit their formal migration plans to the Office of Management and Budget by October 22, 2026.
Further reading
For more information on the technological transition, visit the Quantum Computing section.
Source note: This article includes information reported by EWEEK.
Live Poll
Do you trust federal agencies to secure digital infrastructure against emerging quantum computing threats?
