Australian firms lag in preparation for quantum computing threat

A new survey from DigiCert highlights a significant gap between Australian businesses' awareness of quantum computing threats and their readiness to address them.

The 2025 Quantum Pulse Survey reveals that while 61.4% of Australian organisations see quantum computing as a risk to existing encryption protocols, only 8.5% have shifted to quantum-safe encryption methods. Additionally, 42.9% of respondents believe that large segments of their currently encrypted data could be vulnerable to compromise.

This data points towards a divergence between recognising risks and executing solutions, as many businesses are yet to implement processes that secure data against emerging quantum threats. This finding comes as analysts, including Gartner, have forecast 2029 as the potential year when quantum computing could render today's cryptography insecure, putting pressure on Australian organisations to transition to post-quantum measures within the next five years.

The report emphasises the foundational role of encryption in protecting various sectors, from online banking to healthcare records, and underlines that any erosion of cryptographic strength could expose sensitive data. DigiCert addressed the challenges through the perspectives of industry leaders, warning that current rates of progress towards quantum readiness may be insufficient.

Daniel Sutherland, Regional Vice-President ANZ at DigiCert, stated, "As the global shift toward quantum computing accelerates, organisations must take proactive steps to ensure its cybersecurity posture remains strong. Organisations that prioritise quantum-safe security today will position themselves to confidently embrace the post-quantum future—seizing opportunities instead of scrambling to catch up. Now is the time to act to safeguard critical infrastructure and maintain digital trust in an increasingly quantum-enabled world."

Despite a majority of respondents anticipating that quantum computing will break existing encryption within five years, only 41.7% feel "very prepared" for quantum challenges and just 10.4% claim to be "extremely prepared".

The study suggests this disconnect stems from challenges such as technical complexity, uncertainty about quantum computing timelines, and a perception among some organisations that these risks remain distant. Enterprises with extensive stores of sensitive data are seen as particularly at risk in this evolving scenario, according to the survey findings.

DigiCert's research proposes that organisations could address this by focusing on quantum readiness as a core component of their existing Public Key Infrastructure (PKI) strategies, potentially maximising the return on investment while improving security measures.

Dr. Jim Goodman, CTO at Crypto4A, commented, "The fact that only 5% of global organisations have implemented quantum-safe encryption, despite widespread awareness of the threat, should be a wake-up call. Migrating to post-quantum cryptography isn't just a software patch—it's a foundational shift that requires full visibility into your cryptographic environment, upgrades to hardware, migration to quantum-safe roots of trust, and cross-functional coordination. Those already underway are ahead of the curve and better equipped to handle what's next."

DigiCert has outlined a four-step process for organisations aiming to make this transition. The steps are: conducting an inventory of all cryptographic assets, prioritising updates to long-life assets (such as roots of trust and IoT devices), testing post-quantum algorithms in non-production environments, and becoming 'crypto-agile' by establishing robust visibility and flexible methods for deploying new encryption technologies.

These recommendations are drawn from the company's recent publication, "Post-Quantum Cryptography for Dummies," which aims to help organisations build a foundation for a more secure digital future by encouraging early and comprehensive preparation for post-quantum cyber threats.

The survey was conducted by Propeller Insights and captured the responses of 1,042 senior and C-level cybersecurity managers in the United States, the United Kingdom, and Australia.