QKD and PQC paired in Japan and South Korea, UK-Singapore supervisors, Cisco and Cloudflare PQC plans, Quantinuum claims. Nine signals, six jurisdictions.

OMB M-26-15 migration plan deadline, IETF constrained-device PQC guidance, MAS-UK supervisory convergence, ETSI quantum readiness, ENISA Estonia roadmap.

PQC migration deadlines set by Germany and Singapore, AWS ML-DSA controls, a SEALSQ post-quantum TPM, DRDO QKD and Google magic states. Eight signals.

The week of 5 to 11 October put readiness evidence and capital on the same page. A federal auditor in Washington published a dated baseline showing that none of 24 US agencies had fully addressed all three preparatory practices for post-quantum migration. Europe's law-enforcement agency said timing uncertainty should not be the main concern and urged proactive crypto-agility. Microsoft and the IETF moved post-quantum certificate infrastructure forward on the testing and encod

PQC Governance Digest: Cut-off 9 October 2026 The US Government Accountability Office has put a number on federal PQC readiness: none of 24 major agencies had fully carried out three initial steps, namely inventory, funding and testing. Europol told organisations not to wait for certainty on quantum timing, and Microsoft and the IETF moved certificate infrastructure forward. Four signals cleared verification. Four regions returned null. 1. United States: GAO Sets the Federal

The GAO PQC audit, published on 6 October 2026, tested 24 US federal agencies on inventory, funding and testing for post-quantum cryptography. None had fully addressed all three. This article sets out what the audit found, where its evidence stops, and how a board outside Washington can run the same test. On 6 October 2026, the US Government Accountability Office (GAO), the audit arm of Congress, published GAO-27-108740, QUANTUM COMPUTING: Federal Actions Needed to Prepare fo

The week of 28 September to 4 October fixed the dates and moved the algorithms. The NSA restated its 2027 and 2030 requirements for National Security Systems, NATO attached quarters to its post-quantum cryptography work, and South Korea's science ministry opened a national migration competition. In the same days, Germany's BSI advised against Classic McEliece for new developments, a web infrastructure operator set out a certificate authority built for post-quantum Merkle Tree

BSI Pulls Back on Classic McEliece as NSA Restates PQC Deadlines A national cryptographic authority has told its constituency to stop building new systems on a post-quantum algorithm that, according to industry reporting, an international standard added only four months ago. On 1 October, Germany's BSI advised that Classic McEliece should not be used for new developments after cryptanalytic advances lowered its assessed security level. The same day, the NSA restated that new

The week of 21–27 September was an assurance week. Three independent strands tested the premises cryptographic programmes rest on: a preprint from UC San Diego and Inria forged 1024-bit RSA signatures without factoring the key, public cryptanalysts broke five of China's newly published post-quantum candidate designs within days, and ETSI published guidance treating every stage of the entropy pipeline as untrusted until verified. Around those tests, the compliance and capital

Brian C CEO, SITG-Consulting | Thought Leader & Forensic Strategist Quantum Risk, PQC, ERM, Compliance & Governance | Independent Validation | Board Advisor | Author | Quantum Risk Management 21 September 2026 This week, quantum moved from research infrastructure into sovereign industrial policy. The United States committed over $2.2 billion in combined federal and private capital to quantum manufacturing and fault-tolerant development, NVIDIA launched the orchestration layer

The week of 18 September 2026 marked a shift. Post-quantum cryptography is no longer confined to policy papers and vendor roadmaps. Two events, separated by 11,000 kilometres, demonstrated that regulators and standards bodies are now testing whether organisations can execute the migration they have been told to plan. The Global Quantum Drill: Dubai Puts PQC Under Pressure On 17-18 September, the International Telecommunication Union and the UAE Cybersecurity Council ran the G

Brian C CEO, SITG-Consulting | Thought Leader & Forensic Strategist Quantum Risk, PQC, Compliance & Governance | Independent Validation | Board Advisor | Author | Quantum Risk Management 14 September 2026 The week of 8 September was a capital allocation event, not a research update. The U.S. Commerce Department awarded approximately $400 million in Other Transaction Agreements to four quantum hardware companies, each carrying federal equity stakes. In the same 48 hours, IonQ

Brian C CEO, SITG-Consulting | Thought Leader & Forensic Strategist Quantum Risk, PQC, Compliance & Governance | Independent Validation | Board Advisor | Author | Quantum Risk Management 7 September 2026 This week in The Quantum Weekly the signal finally outran the noise. On 3 September, the G7 Cybersecurity Working Group published Preparing for the Post-Quantum Era: A Call to Action, reframing PQC migration as a collective infrastructure transition rather than a compliance e

Brian C CEO, SITG-Consulting | Thought Leader & Forensic Strategist Quantum Risk, PQC, ERM, Compliance & Governance | Independent Validation | Board Advisor | Author | Quantum Risk Management 31 August 2026 Stop assuming quantum progress moves in isolated pockets. This week, capital and hardware advanced on the same timeline across multiple regions. Pasqal listed on Nasdaq. Canada announced its largest quantum manufacturing investment to date. IBM expanded its hardware portfo

Brian C CEO, SITG-Consulting | Thought Leader & Forensic Strategist Quantum Risk, PQC, ERM, Compliance & Governance | Independent Validation | Board Advisor | Author | Quantum Risk Management 24 August 2026 This was a week in which post-quantum cryptography stopped being a standards conversation and became a procurement, assurance and deployment conversation across three continents simultaneously. A Canadian module cleared the highest independent hardware validation tier avai

Brian C CEO, SITG-Consulting | Thought Leader & Forensic Strategist Quantum Risk, PQC, ERM, Compliance & Governance | Independent Validation | Board Advisor | Author | Quantum Risk Management 17 August 2026 This week closed a loop opened the week before and started several new ones. Nine days after an AWS cryptographer's preliminary algorithm reopened questions about the mathematics beneath ML-KEM, a formal, machine-checked refutation from researchers at MIT, Stanford and Goo

🌐The Global Signals That Actually Mattered (3 - 9 August 2026) Brian C CEO, SITG-Consulting | Thought Leader & Forensic Strategist Quantum Risk, PQC, ERM, Compliance & Governance | Independent Validation | Board Advisor | Author | Quantum Risk Management 10 August 2026 This week's structural signal was theoretical provenance meeting sovereign procurement, moving on independent clocks. An Amazon Web Services cryptographer posted a preliminary polynomial-time quantum algorithm

Brian C CEO, SITG-Consulting | Thought Leader & Forensic Strategist Quantum Risk, PQC, ERM, Compliance & Governance | Independent Validation | Board Advisor | Author | Quantum Risk Management 3 August 2026 This week's structural signal was verification, not capability. Anthropic stated its AI model broke a NIST post-quantum signature candidate that had survived two full rounds of accredited human expert review; the algorithm's own developers confirmed the finding and withdrew

Colombia is in the early stage of PQC adoption. The country faces elevated quantum risk due to heavy reliance on classical cryptography across financial services, government platforms, and telecom networks. Movement has begun through digital signature reform and initial alignment with NIST standards, but Colombia has no national PQC roadmap yet. Government Posture: Digital Signature Reform Colombia’s digital signature law, Law 527 of 1999, is being updated to include post qua

27 July 2026 This week the confirmed signal set was dominated by state and quasi-state actors building coordination infrastructure rather than by vendors announcing capability. Israel opened a funded tender for national quantum R&D infrastructure, the UK's National Cyber Security Centre convened its first joint government-industry PQC migration workshop, and Japan's government-backed research agency launched a fiscal-year-scheduled silicon quantum manufacturing programme. In