Awareness and training on post-quantum cryptography, with AI safety and cyber risk alongside it. Live workshops and in-house training for the path to long-term cryptographic and cybersecurity resilience.
The budget, supplier and risk decisions behind post-quantum migration sit with leadership. Our main audience is the boards and executives of medium and large organisations. We also teach the wider workforce and the teams who will do the work.
What quantum computing changes, what regulators expect, which questions to ask, and how to oversee a migration that runs for years.
A shared understanding across the organisation, so the people who buy, build and manage systems know why cryptography choices now matter.
Working knowledge for the teams who will find where cryptography is used and plan the move to the new standards.
Our main subject. What quantum computing means for encryption, the new NIST standards, the NCSC timeline to 2035, and how to plan a migration that runs for years.
A second strand. How AI changes cyber risk, and what safe, well-governed use of AI looks like in an organisation, explained in plain language for leaders.
Interactive sessions led by an instructor, with time for questions. Good for building a shared understanding across a leadership team or a group of teams.
Content built around your sector, your suppliers and the systems you run, and delivered to your people. We agree the scope, audience and length with you.
Organisations across critical sectors such as telecommunications, finance, defence, and national infrastructure operate in an environment of escalating cyber risk. Today’s threats extend beyond criminal activity to include sophisticated non-state and nation-state actors, where a single breach can disrupt essential services, erode trust, and impact those who depend on them.
At the same time, advances in artificial intelligence, and the emergence of quantum computing are weakening the long-term reliability of existing cryptographic protections. As a result, governments and regulators are accelerating expectations for post-quantum security, bringing complex migration challenges forward.
Quantum Safe Futures is where we write about all of it. We’re practitioners working day-to-day in cybersecurity and cryptographic resilience across critical industry — not commentators watching from the sidelines. Expect breakdowns of new regulations, deep dives into migration strategies, commentary on the latest quantum and AI developments, and practical takes on what it all means for the people actually doing the work.
Cryptographic resilience means being able to be agile as the threat landscape evolves. It requires security architectures that are flexible by design, combining multiple protective layers to separate critical systems from adversaries.
Crucially, it also demands cryptographic protections that remain effective over time, including against computational advances that enable delayed attacks such as data harvesting today for decryption in the future.
Embedding these principles into your cybersecurity framework allows organisations to stay ahead of emerging risks. By creating depth, redundancy, and longevity in cryptographic controls, you increase the effort required to compromise systems and reduce the likelihood that any single weakness can be exploited.
The National Cyber Security Centre (NCSC) expects organisations to work to three milestones for moving to post-quantum cryptography.
Finish discovering and assessing the cryptography you use, set migration goals, draw up an initial plan and tell your suppliers what you need.
Complete the highest-priority migrations, prepare your infrastructure, and refine the plan into a clear route to full migration.
Every system, service and product migrated to post-quantum cryptography.
Source: NCSC, Timelines for migration to post-quantum cryptography, published 20 March 2025.
We now run live workshops and bespoke in-house training on post-quantum security for boards, executives and their teams. If you want a session for your organisation, use the enquiry form on the education page.
Quantum Safe Futures
The NCSC sets three dates for UK organisations: finish discovery and draw up a plan by 2028, complete the highest-priority migrations by 2031, and finish migrating everything by 2035. The guidance is aimed mainly at large organisations, operators of critical national infrastructure and companies with bespoke IT.
Source: National Cyber Security Centre
FIPS 203 (ML-KEM) covers general encryption. FIPS 204 (ML-DSA) covers digital signatures. FIPS 205 (SLH-DSA) is a second signature standard built on a different mathematical approach, as a fallback. NIST urged organisations to start integrating them straight away.
Source: NIST
Tell us who needs to be in the room and what you need them to understand. We will come back to you about format and timing.
