How Organizations Can Prepare for Post-Quantum Cryptography

Summary

Intel’s Steve Orrin advises organizations to inventory cryptography across IT, operational technology and vendors, then prioritize high-value systems, long-lived data and trust relationships in a phased post-quantum migration plan.

Key points

• Organizations should identify where cryptography is used across applications, infrastructure, operational technology, connected devices and third-party services.
• Combining cryptographic discovery with asset and financial records can help reveal managed technology and vendor services.
• Prioritize systems based on the confidentiality and integrity they need to preserve, including trade secrets, personal information, regulated records, digital signatures and financial ledgers.
• Plan a phased migration around business priorities and available budgets, particularly for systems that may be difficult to upgrade.
• The interview notes that post-quantum risks extend beyond future decryption of intercepted data to digital signatures and other trust relationships.

People