The Netherlands sits in Tier 2 of SITG-Consulting’s Europe’s Post-Quantum Readiness 2026 assessment. That is an important distinction. The Netherlands has produced some of the strongest practical PQC migration guidance we found anywhere in Europe. But strong guidance is not the same thing as a governed national migration programme. Government Posture: Strong Guidance, No Binding Migration Programme The Dutch position is built around two important pieces of work. The PQC Migra

Lithuania stands apart in our assessment of post-quantum readiness across the EU-27. It is the only Member State to reach Tier 1, High Confidence. This does not mean Lithuania has completed its PQC migration. It means something more useful at this stage: the country has established publicly verifiable migration machinery, with governance, mandatory actions, implementation dates, inventory requirements and procurement provisions. Government Posture: From Awareness to Execution

Norway’s digital ecosystem is one of the most mature and trusted in Europe. The country is now entering an early but serious quantum-transition phase. The government has begun developing a national quantum technology strategy for publication in 2026, supported by the Research Council of Norway, Innovation Norway and the Norwegian National Security Authority (NSM). Investment is also increasing, including NOK 244 million awarded to four national quantum research centres. NSM’s

Cuba operates one of the most state‑controlled cybersecurity regimes in the Western Hemisphere. Its legal architecture is built on Decreto 360/2019, Decreto‑Ley 35/2021, and Resolution 105/2021, all of which focus on ICT security, cyberspace defence, telecom control, and mandatory incident reporting - none of which contain PQC migration, crypto‑agility, or quantum‑risk provisions. Government Posture: Strong Control, No Quantum Strategy Cuba’s cybersecurity model is centralise

The UAE is a high-maturity digital state with world-class infrastructure, aggressive AI adoption, and strong cybersecurity regulation. Recognizing its exposure as a global hub, the UAE moved decisively into action. In late November 2025, the UAE Cybersecurity Council approved the National Encryption Policy and Executive Regulation No. 71 of 2024, legally mandating Post-Quantum Cryptography (PQC) migration. Government Posture: Global Pioneer in Mandatory Migration The UAE's di

Taiwan is advancing PQC through semiconductor security requirements, national defense modernization, and selective government upgrades. It does not publish loud quantum strategies, but it is quietly building one of the most security driven PQC environments in Asia due to geopolitical exposure and its central role in global chip supply chains. Government Posture: Security Driven PQC Adoption The Executive Yuan and National Science and Technology Council treat quantum risk as

India is emerging as Asia’s most assertive sovereign adopter of Post Quantum Cryptography. Under the National Quantum Mission and MeitY’s PQC Task Force, the country is driving a three phase migration plan backed by domestic testing and procurement requirements. PQC has moved from research into a core element of digital sovereignty and critical infrastructure security. Government Posture: NQM Steering and Indigenous Sovereignty DST, MeitY, C DOT, CERT In, and DSCI lead a dua

Singapore is Asia's most operationally advanced PQC adopter. With a unified strategy, live quantum safe networks, and proactive regulators, PQC has moved from theory to structured deployment. Government Posture: Centralised & Risk-Based Leadership: Strategy led jointly by CSA, National Quantum Office, MAS, and IMDA. Standards: PQC is the primary migration path, aligned with NIST FIPS 203, 204, and 205. Core Milestones: End 2025: CII operators must complete full crypto invento

South Korea is a global semiconductor and technology powerhouse. It does not have a CNSA style, economy wide crypto retirement deadline, but it does have a government backed PQC Master Plan, sector wide pilots, and a national playbook aimed at transforming the country’s cryptographic infrastructure by 2035. Industry is still moving faster than regulation, but the state is not passive. Korea is building a phased and coordinated PQC transition. Government Posture: Master Plan a

New Zealand is the only Five Eyes member with no PQC retirement deadline. Conservative and advisory in posture, yet home to one of the globally significant contributors to ML‑DSA. This is NZ’s real PQC position. Government posture: NZISM v3.8 (Sept 2024), Section 2.4 requires agencies to inventory cryptographic assets, monitor GCSB updates, and prepare migration plans. No PQC algorithms are approved, and no deadline exists for retiring RSA, DH, ECDH or ECDSA. GSMA’s 2025 tra

🚨 BREAKING: Quantum Just Got Secure-by-Design - And Silicon Is Moving First The last 24 hours in PQC and quantum have been louder than anyone expected. 💥 Europe may have just fired the starting gun on secure-by-design quantum hardware. 🇪🇺 SEALSQ and Quobly signed a $5M deal to embed post-quantum cryptography directly into Quobly’s silicon quantum processors. 🤝 Not PQC at the application layer. ❌ Not PQC wrapped around the cloud. ☁️ PQC integrated into the cryogenic contr

The last 24 hours in PQC and quantum have been louder than anyone expected. 💥 Europe may have just fired the starting gun on secure-by-design quantum hardware. 🇪🇺 SEALSQ and Quobly signed a $5M deal to embed post-quantum cryptography directly into Quobly’s silicon quantum processors. 🤝 Not PQC at the application layer. ❌ Not PQC wrapped around the cloud. ☁️ PQC integrated into the cryogenic control electronics themselves. 🧊 We’re talking about Cryo-CMOS ASICs with PQC ac

Brian Couzens Founder & CEO, SITG-Consulting | Forensic Strategist | Cyber Resilience, Quantum Risk & Governance | Transformation, ERM & Independent Validation | Writer | White Paper Author | Evidence-Based Decision Making June 29, 2026 This week featured an unusually dense cluster of consequential announcements across PQC governance, quantum hardware, capital formation, and infrastructure standardisation. The United States signed two executive orders simultaneously on 22 Jun

#Moody's may have delivered one of the most important post-quantum signals of 2026. Not because of a breakthrough in quantum computing. Not because of a new cryptographic standard. Because a global credit rating agency has started discussing Post-Quantum Cryptography (PQC) as a budgetary, governance and enterprise risk issue. For many years, this has been the position of SITG-Consulting. Our Quantum Risk White Paper, first published in 2024, revised in December 2025 and again

Three post-quantum KEMs now sit inside one of the principal international standards for asymmetric encryption: ML-KEM, Classic McEliece and FrodoKEM. Read that again. Not one algorithm. Three. From three different mathematical families. Why this matters before the detail. A standards body had a choice. It could have ratified the market's preferred answer, ML-KEM, and closed the question. It did not. It standardised a structured lattice scheme, an unstructured lattice scheme a