Insights into a Post-Quantum Safety Transformation Journey

The quantum threat is no longer theoretical. Yet moving a large organization from awareness to structured action, systematically and without paralysis, remains genuinely difficult. This talk shares practical insights from two years inside a live post-quantum security transformation, built around four pillars.

Planning despite uncertainty: how hypothesis-based planning keeps long-term strategy adaptable, and how transparency and accountability turn ambiguity into a manageable condition rather than a blocker. Making risk tangible: abstract threats don't move budgets, so we present our framework for prioritizing across a complex IT landscape, including a method for quantifying quantum exposure and translating it into a concrete sense of urgency for decision-makers.

Building awareness that sticks: transformation stalls without broad understanding, so we share what has worked for propagating post-quantum safety awareness internally across all organizational levels, and externally through collaboration with partners and suppliers. Governing what you measure: a real insight into our operative governance model, the KPIs we track, the maturity framework we developed, early results, and an honest outlook on the road ahead.

We offer no definitive answers; quantum readiness is still a work in progress for us, as it is for most. What we can offer is a transparent view into a complex, ongoing transformation and the frameworks that have helped us navigate it.