CISA, partners publish post-quantum questions to ask vendors

The Cybersecurity and Infrastructure Security Agency and international partners released guidance to help organizations assess vendor readiness for transitioning to post-quantum cryptography.

Increased PQC Focus:

• CISA and the Group of Seven Cyber Security Working Group in September said organizations and governments should begin transitioning to PQC to protect sensitive data, authentication systems, and critical assets from emerging quantum computing threats.

• The Treasury Department in August announced the launch of the Quantum-Readiness Task Force to strengthen cryptographic protections following President Donald Trump’s June executive orders on protecting against cryptographic attacks and enabling quantum innovation.

ICBA View: These actions signal that post-quantum security is becoming a cybersecurity priority for critical infrastructure sectors and community banks should begin focusing on cryptographic inventories, vendor readiness, and long-term migration planning.

Upcoming Resource: The ICBA Cyber and Data Security Subcommittee is actively working on a Community Bank Post-Quantum Cryptography Readiness Guide.