Applied Quantum

Monday, November 2, 20:00 UTC: our free webinar with Quantum Academy on briefing the board on quantum risk. If you report to a board on cyber risk, expect questions about quantum exposure, timing, budget and ownership. On Monday we go through each of them, with the evidence a board can rely on. There's still time to register: quantumacademy.com/webinars/ #PQC #CyberRisk

If you sell to the US federal government, expect post-quantum requirements in your contracts. Under Executive Order 14412, the FAR Council has to propose PQC rules for contractors. Agencies have until December 31, 2030 to put post-quantum key establishment on their high-value and high-impact systems, and until December 31, 2031 for post-quantum signatures. From January 1, 2027, new National Security System acquisitions must be CNSA 2.0 compliant. On Friday, November 13, at 18:00 UTC, we're running a free webinar with Quantum Academy on what EO 14412, OMB M-26-15 and CNSA 2.0 require, for agencies and for the contractors who supply them. Register: quantumacademy.com/webinars/ 60 minutes, live online (13:00 Washington, 10:00 San Francisco). Everyone who registers gets the recording. #PQC #GovCon #Cybersecurity

Today at 15:00 UTC, with Quantum Academy: our free webinar on the 2026 Q-Day estimates. Google and Quantinuum both demonstrated new results in October. Neither result lowers the qubit estimates for breaking RSA or elliptic-curve cryptography, and we explain why. Then we cover which parts of a migration plan to change because of the new numbers. There's still time to register: quantumacademy.com/webinars/ #PQC #QuantumComputing

The EU's first post-quantum milestone is due at the end of 2026: initial planning, asset identification and first pilots. The EU wants high-risk systems migrated by 2030 and medium-risk systems by 2035. On Thursday, November 12, at 13:00 UTC, we're running a free webinar with Quantum Academy on how to meet that first milestone in practice. We'll turn it into evidence a regulated organization can show: an inventory scope, a risk ranking, a pilot and a plan, matched to what NIS2 and DORA supervisors ask for. Register: quantumacademy.com/webinars/ For CISOs, compliance and GRC leads, and migration program owners at organizations under NIS2 or DORA. 60 minutes, live online (14:00 Brussels, 13:00 London). Everyone who registers gets the recording. #PQC #NIS2 #DORA

Boards decide four things about quantum risk: exposure, timing, budget and who owns the migration. On Monday, November 2, at 20:00 UTC, we're hosting a free webinar with Quantum Academy on the questions directors ask about each, and how to answer them without overstating or understating the threat. Register: quantumacademy.com/webinars/ Regulators have already set two of the dates. The EU wants high-risk systems migrated by 2030. In the US, federal high-value systems need post-quantum key establishment by the end of 2030. We'll also cover what the board should expect to fund in the first year, and what it should hear from the migration owner each quarter. For board directors, audit and risk committee members, CEOs, CISOs and CROs. 60 minutes, live online (15:00 New York, 21:00 Berlin). Everyone who registers gets the recording. #PQC #BoardOfDirectors #CyberRisk

Only one of the 24 major federal agencies had completed its cryptographic inventory step when GAO reviewed them in October. Under Executive Order 14412, CISA and NIST have until about March 19, 2027 to publish minimum elements for a cryptographic bill of materials (CBOM). On Wednesday, November 11, at 17:00 UTC, we're running a free webinar with Quantum Academy on building an inventory and a CBOM that a migration team can act on. Register: quantumacademy.com/webinars/ We'll compare the main discovery methods, including what you miss with each, and show how to set scope when a full inventory is not possible. For security architects, cryptography and PKI engineers, GRC teams and migration program leads. 60 minutes, live online (12:00 New York, 18:00 Berlin). Everyone who registers gets the recording. #PQC #CBOM #Cryptography

Financial supervisors have started to say what they expect on quantum-safe migration. In January, the G7 Cyber Expert Group asked financial institutions to migrate critical systems first, against an international target of 2035. In September, CISA and the G7 Cyber Security Working Group asked organizations to build post-quantum cryptography into procurement. On October 20, MAS and HM Treasury discussed supervisory expectations for the transition. On Wednesday, November 4, at 13:00 UTC, we're running a free webinar with Quantum Academy on what this means for banks, insurers and payment firms, and on the evidence to prepare for supervisory conversations in 2027. Register: quantumacademy.com/webinars/ We'll also cover how to bring vendors and third parties into the plan through procurement requirements. 60 minutes, live online (13:00 London, 14:00 Frankfurt, 21:00 Singapore). Everyone who registers gets the recording. #PQC #FinancialServices #Banking

How many physical qubits does it take to break RSA-2048? In 2019, researchers estimated about 20 million. By 2025, they had brought it under one million. In February 2026, Iceberg Quantum put it under 100,000 in a simulation. On Thursday, October 29, at 15:00 UTC, we're running a free webinar with Quantum Academy on what changed in this year's estimates, and what didn't. Register: quantumacademy.com/webinars/ We'll separate what Google and Quantinuum demonstrated in October from what they announced. Then we'll turn to the migration plan: what to change because of the new numbers, and what to leave as it is. For CISOs, security architects and risk leaders who have to explain the 2026 numbers to a board or a budget committee. 60 minutes, live online (11:00 New York, 16:00 Berlin), with 15 minutes for your questions. Everyone who registers gets the recording. #PQC #QuantumComputing #Cybersecurity

At the upcoming SANS Emerging Threats Summit on May 14, Marin Ivezic will be delivering a session: "Preparing for the Quantum Threat: Practical Steps for Cybersecurity Teams" Emerging Threats Summit is a free online event and you can register here: sans.org/u/1zh8