Quantum Computing: Federal Actions Needed to Prepare for Emerging Cyber Threat

Summary: This GAO report examines quantum computing threats to federal cryptography for agency CIOs, CISOs, cybersecurity teams, and policymakers. GAO found that none of the 24 selected federal agencies fully addressed three key practices for preparing to migrate to post-quantum cryptography.

Readers will learn how future quantum computers could expose sensitive data and how agencies are preparing inventories, funding assessments, and cryptographic testing. GAO found that 23 agencies had not addressed post-quantum cryptography testing and made 89 recommendations to 23 agencies in an earlier sensitive report. GAO warns that agencies “will not be well-positioned to address the threat” until weaknesses are resolved. This public report adds no new recommendations.