DigiCert has released findings from a new survey that uncovers a significant gap between enterprise awareness of quantum computing threats and actual preparedness. The research shows that while 69% of organisations recognise the risk quantum computing poses to current encryption standards, only 5% have implemented quantum-safe encryption, and 46.4% report that substantial portions of their encrypted data could be compromised.
The findings highlight a critical inflection point: enterprises know the quantum clock is ticking, yet few have taken meaningful steps to secure their digital future. With encryption underpinning everything from online banking and medical records to smart homes and cloud services, ensuring its strength and resilience is fundamental for protecting sensitive data.
“The quantum era presents both a significant risk and a transformative opportunity as we reach an inflection point for enterprise security,” said Kevin Hilscher, Senior Director of Product Management, DigiCert. “Organisations should already be into the early phases of their quantum readiness plan – starting with asset discovery and risk assessment, with the ultimate goal of crypto-agility. The groundwork being laid today will determine which organisations are positioned to maintain trust and resilience when quantum computing becomes a reality. DigiCert is supporting this journey with quantum-safe PKI solutions and frameworks that help enterprises manage complexity and take action with confidence.”
In spite of a majority (69%) of organisations believing quantum computers will break current encryption within five years, preparedness remains low: only 38% feel ‘very prepared’ for quantum threats, while 19.2% claim they are ‘extremely prepared’.
This gap highlights a clear disconnect—enterprises recognise the threat but are slow to act due to perceived complexity, uncertainty, and believe that quantum computing is still a long way off. With the largest stores of sensitive data, enterprises are also the most at risk. DigiCert’s research aims to bridge the gap between hype and action, providing clarity and strategy as cryptography evolves. It also points to a broader strategic opportunity: enterprises can maximise return on investment in Public Key Infrastructure (PKI) by making quantum-readiness a key driver of their current security planning.
“The fact that only 5% of organisations have implemented quantum-safe encryption, despite widespread awareness of the threat, should be a wake-up call,” said Dr. Jim Goodman, CTO, Crypto4A. “Migrating to post-quantum cryptography isn’t just a software patch—it’s a foundational shift that requires full visibility into your cryptographic environment, upgrades to hardware, migration to quantum-safe roots of trust, and cross-functional coordination. Those already underway are ahead of the curve and better equipped to handle what’s next.”
According to the 2025 edition of the book, ‘Post-Quantum Cryptography for Dummies’, DigiCert puts forward four steps for organisations to transition to a quantum-safe security posture:
- Inventory cryptographic assets: organisations should first inventory their certificates, algorithms, and other cryptographic assets, prioritise them based on their level of criticality and decide what needs to be upgraded or replaced
- Prioritize replacing encryption algorithms for crypto that needs to be trusted for a long time: examples include roots of trust, eSignatures and long-lived IoT devices
- Explore and test the ways your organisation incorporates post-quantum cryptography (PQC) algorithms: begin testing upgrade paths and interoperability in non-production environments
- Become crypto-agile: after completing the inventory, achieving crypto-agility involves asset visibility, establishing methods for deploying encryption technologies and the ability to respond quickly when security issues arise
There’s plenty of other editorial on our sister site, Electronic Specifier! Or you can always join in the conversation by commenting below or visiting our LinkedIn page.
