UK: Timelines for migration to post-quantum cryptography

**Submission Statement**

The **National Cyber Security Centre (NCSC)**, as the UK’s leading authority on cybersecurity, has issued critical guidance to help **UK organisations** prepare for the transition to **Post-Quantum Cryptography (PQC)**. Recognising the unique challenges faced by UK businesses, government agencies, and critical national infrastructure (CNI), the NCSC has set a clear, **UK-focused timeline** (2028–2035) for migrating to quantum-resistant encryption. This initiative underscores the UK’s commitment to maintaining its cybersecurity leadership and protecting national interests in the face of advancing quantum computing threats. The guidance calls for **UK organisations** to begin discovery and planning by 2028, prioritising high-risk systems by 2031, and completing full migration by 2035. While the threat is global, the NCSC’s recommendations are specifically designed to address the needs of **UK industry and public sector**, ensuring a coordinated and resilient approach to safeguarding the UK’s digital future. By acting now, **UK entities** can avoid being left vulnerable to quantum attacks and maintain compliance with emerging standards, reinforcing the UK’s position at the forefront of cybersecurity innovation.