About the Author
Mehmet Ali Yagis is Co-Founder & Director General at QSD, focusing on strategy, risk architecture, AI governance and quantum-resilience roadmaps.
2026 Reality Check
The planning discussion has become materially more concrete. The EU’s coordinated roadmap says Member States should start transitioning to PQC by the end of 2026 and that critical infrastructure should move as soon as possible, no later than the end of 2030. The UK NCSC uses a different but complementary planning model: discovery and an initial plan by 2028, highest-priority migration by 2031 and completion by 2035. None of these dates predicts Q-Day. Their value is managerial: they translate uncertainty into action windows and reinforce why long-lived confidential data cannot wait for a breakthrough announcement.
The wrong question: “When is Q-Day?”
Q-Day is often discussed as if it were a calendar event: a future date on which a sufficiently capable quantum computer suddenly makes today’s public-key cryptography unsafe. That framing is attractive because it creates a deadline. It is also operationally misleading. Organisations do not need a precise prediction to make a rational security decision. They need to understand how long their sensitive data must remain protected, how long their cryptographic migration will take and how much uncertainty they can tolerate.
Harvest Now, Decrypt Later changes the timeline
An attacker does not need to break encryption today to create future harm. Encrypted traffic or data can be collected now and retained until future capabilities make decryption feasible. That means information with a long confidentiality lifetime can already be exposed to future compromise even when current encryption remains computationally strong. For leadership teams, this converts quantum risk from a distant technology forecast into a data-lifecycle and transition-planning problem.
Planning backwards from data lifetime
A practical quantum-readiness assessment starts with three time horizons: the sensitivity lifetime of the data, the expected migration time of the systems protecting it and the uncertainty window around cryptanalytic or quantum progress. If the confidentiality lifetime extends beyond the period in which the organisation can credibly complete migration, the exposure is already strategically relevant. This is why discovery and prioritisation should begin with business services and data classes, not with a debate about one predicted Q-Day.
Migration is slower than algorithm selection
Selecting a standardised post-quantum algorithm is only one part of the transition. Real environments contain PKI, HSMs, certificates, VPNs, TLS endpoints, application libraries, embedded devices, supplier products, signing processes and legacy platforms. Each has its own lifecycle, interoperability constraints and change windows. Organisations that wait for urgency to become obvious may find that the slowest dependency—often a supplier or legacy platform—sets the schedule.
A better management question
Instead of asking “When will quantum computers break our encryption?”, ask: “Which information and trust services would we regret not having migrated five years earlier?” That question leads to measurable action: build a cryptographic inventory, identify long-lived sensitive data, assess supplier readiness, define crypto-agility requirements and create a sequenced transition roadmap. Q-Day is therefore best treated as a planning horizon—not a prediction.
Key Takeaway
QSD perspective: Begin with exposure discovery and a risk-based transition roadmap, then maintain progress through continuous governance rather than a one-off migration project.