DigiCert, a pioneering provider of digital trust, released findings from a new survey that uncovers a significant gap between enterprise awareness of quantum computing threats and actual preparedness.
The research shows that while 69% of organizations recognize the risk quantum computing poses to current encryption standards, only 5% have implemented quantum-safe encryption, and 46.4% report that substantial portions of their encrypted data could be compromised.
Smart homes and cloud services
With encryption underpinning online banking and medical records to smart homes
The findings highlight a critical inflection point: Enterprises know the quantum clock is ticking, yet few have taken meaningful steps to secure their digital future.
With encryption underpinning everything from online banking and medical records to smart homes and cloud services, ensuring its strength and resilience is fundamental for protecting sensitive data.
Quantum-safe PKI solutions and frameworks
“The quantum era presents both a significant risk and a transformative opportunity as we reach an inflection point for enterprise security,” said Kevin Hilscher, Senior Director of Product Management at DigiCert.
“Organizations should already be into the early phases of their quantum readiness plan – starting with asset discovery and risk assessment, with the ultimate goal of crypto-agility. The groundwork being laid today will determine which organizations are positioned to maintain trust and resilience when quantum computing becomes a reality."
"DigiCert is supporting this journey with quantum-safe PKI solutions and frameworks that help enterprises manage complexity and take action with confidence.”
Quantum computing
A majority of corps believing quantum computers will break current encryption within 5 years
Despite a majority (69%) of organizations believing quantum computers will break current encryption within five years, preparedness remains low: only 38% feel “very prepared” for quantum threats, while 19.2% claim they are “extremely prepared.”
This gap highlights a clear disconnect—enterprises recognize the threat but are slow to act due to perceived complexity, uncertainty, and believe that quantum computing is still a long way off.
DigiCert’s research
With the largest stores of sensitive data, enterprises are also the most at risk. DigiCert’s research aims to bridge the gap between hype and action, providing clarity and strategy as cryptography evolves.
It also points to a broader strategic opportunity: Enterprises can maximize return on investment in Public Key Infrastructure (PKI) by making quantum-readiness a key driver of their current security planning.
Quantum-safe encryption
DigiCert’s research aims to bridge the gap between hype and action, providing clarity
“The fact that only 5% of organizations have implemented quantum-safe encryption, despite widespread awareness of the threat, should be a wake-up call,” said Dr. Jim Goodman, CTO at Crypto4A.
“Migrating to post-quantum cryptography isn’t just a software patch—it’s a foundational shift that requires full visibility into your cryptographic environment, upgrades to hardware, migration to quantum-safe roots of trust, and cross-functional coordination. Those already underway are ahead of the curve and better equipped to handle what’s next.”
DigiCert recommends four steps
According to the 2025 edition of the book, “Post-Quantum Cryptography for Dummies,” DigiCert recommends four steps for organizations to transition to a quantum-safe security posture:
- Inventory cryptographic assets. Organizations should first inventory their certificates, algorithms, and other cryptographic assets, prioritize them based on their level of criticality and decide what needs to be upgraded or replaced.
- Prioritize replacing encryption algorithms for crypto that needs to be trusted for a long time. Examples include roots of trust, eSignatures and long-lived IoT devices.
- Explore and test the ways in organization incorporates post-quantum cryptography (PQC) algorithms. Begin testing upgrade paths and interoperability in non-production environments.
- Become crypto-agile. After completing the inventory, achieving crypto-agility involves asset visibility, establishing methods for deploying encryption technologies and the ability to respond quickly when security issues arise.
By identifying and managing crypto assets now, organizations can position themselves defensively against the threat of post-quantum cyberattacks and lay the foundation for a secure and trusted digital future.
Research methodology
This research was commissioned by DigiCert and conducted independently by Los Angeles-based Propeller Insights, which surveyed 1,042 senior and C-level cybersecurity managers in the United States, the United Kingdom, and Australia.
