Federal Agencies Lagged in Post-Quantum Preparation
No federal agencies fully met cryptography preparation requirements, stalling the path to 2030 quantum-resistant standards.
Updated on Oct. 12, 2026 in Quantum Computing
Live Poll
Do you trust federal agencies to secure digital infrastructure against emerging quantum computing threats?
A Government Accountability Office report released on October 6, 2026, revealed that zero of the 24 Chief Financial Officers Act agencies fully addressed three critical post-quantum cryptography preparation requirements. The audit, covering the period from February 2024 to September 2025, highlights systemic delays in inventorying and testing.
Why it matters
Federal agencies face a $7.1 billion challenge to secure systems against future quantum threats, yet critical skills and vendor tools remain scarce. The findings underscore a massive implementation gap as deadlines for full cryptographic migration approach.
Of the 24 audited agencies, none tested quantum-resistant algorithms, while 18 reported a lack of necessary cryptography expertise. Migration across prioritized systems carries an estimated $7.1 billion price tag.
The players
Government Accountability Office
The federal agency responsible for auditing and providing investigative reports on government operations and spending.
Office of Management and Budget
The executive agency that oversees the implementation of federal policies, budgets, and cryptographic migration planning.
Cybersecurity and Infrastructure Security Agency
The federal entity tasked with identifying automated tools to help agencies discover and remediate cryptographic vulnerabilities.
The details
Agencies were evaluated on their progress in three key areas: performing system inventories to identify vulnerable cryptography, estimating replacement funding, and testing quantum-resistant algorithms—mathematical methods designed to withstand attacks from quantum computers. The audit found that only one agency had completed its system inventory. Many agencies reported that testing was premature due to a current lack of available vendor products and automated discovery tools.
Timeline
The Government Accountability Office conducted its audit from February 2024 through September 2025.
The official report was released to the public on October 6, 2026.
Federal agencies are required to submit migration plans to the Office of Management and Budget by October 22, 2026.
Agencies must adopt post-quantum cryptography for key establishment by December 31, 2030.
Agencies must adopt post-quantum cryptography for digital signatures by December 31, 2031.
The Tech Race
The audit highlights the widening gap between mandatory security standards and the practical readiness of agencies governed by the Chief Financial Officers Act. The slow adoption trajectory contrasts with the rapid rise of quantum computing capabilities that threaten current encryption.
This report indicates significant delays in hardening the underlying infrastructure that protects federal systems and data. Citizens will not see immediate changes, but the failure to prepare now shifts the burden of cryptographic updates toward the 2030 and 2031 deadlines.
The takeaway
Agencies are effectively stalled by a lack of specialized labor and vendor-ready tools, despite a multibillion-dollar funding estimation. Readers should watch for the October 22, 2026, submission deadline to see if agencies can finally deliver actionable migration roadmaps.
What happens next
Federal agencies must submit their mandatory migration plans to the Office of Management and Budget by October 22, 2026.
Further reading
For more updates on the evolution of secure systems, visit our Quantum Computing section.
Source note: This article includes information reported by EWEEK.
Live Poll
Do you trust federal agencies to secure digital infrastructure against emerging quantum computing threats?
