Quantum Technology Adopters Persona

As #quantum #computing steadily permeates the realm of cybersecurity, an increasing number of organizations are recognizing the attendant risks. However, the pace of risk recognition and the level of awareness are still disproportionately low compared to the actual degree of risk involved.

One of the frequently asked questions in this context pertains to the urgency with which a particular organization should respond to this evolving landscape. A valuable resource that offers some guidance on this matter is the "PQC Migration Handbook" published by the Netherlands Communications Security Agency.

The Handbook distinguishes between three types of organizations:

1. #Urgent #Adopters: These are organizations that handle sensitive data or provide critical or long-lasting infrastructures. Such entities should prioritize taking the first steps towards Post-Quantum Cryptography (PQC) migration immediately. The Handbook further differentiates within this category, identifying various types of organizations that must act swiftly based on their susceptibility to potential quantum computer attacks.

2. #Regular #Adopters: Regular adopters are organizations that, while they may still handle sensitive data, don't provide critical or long-lived infrastructures with a high risk of attack. The likelihood of their data being stored for decryption by a future quantum computer is relatively low, meaning their migration to PQC can proceed at a less urgent pace.

3. #Cryptography #Experts: This category comprises organizations that deliver cryptographic standards or infrastructure. The critical difference between these entities and urgent adopters is that cryptography experts should already possess extensive in-house knowledge necessary for PQC migration. Furthermore, they bear the responsibility for the cryptographic assets of other organizations.

For a more detailed explanation, you can refer to the original article here.