Insider Brief
- A bipartisan Senate bill would require the federal government to develop a coordinated strategy to protect sensitive data from future quantum-enabled cyber threats.
- The legislation directs the White House Office of Science and Technology Policy to lead agency-wide efforts to migrate encryption systems to quantum-resistant standards.
- A pilot program would mandate each agency to upgrade at least one high-impact system and establish performance benchmarks to guide long-term migration.
A new bipartisan bill introduced in the Senate would require the federal government to develop and implement a coordinated strategy to protect sensitive data from future cybersecurity threats posed by quantum computing.
The National Quantum Cybersecurity Migration Strategy Act, introduced by Senators Gary Peters (D-MI) and Marsha Blackburn (R-TN), directs the White House Office of Science and Technology Policy to lead a government-wide effort to upgrade encryption systems before quantum computers can render existing protections obsolete. The legislation responds to growing concern that hostile actors could steal encrypted data today and decrypt it in the future using powerful quantum machines, according to a news release from the Senators.
“It’s critical that the federal government be prepared for any threat posed by quantum computing technology, especially when it concerns our national security,” said Senator Peters. “My bill would help keep Americans safe by ensuring we have a quantum cybersecurity migration strategy to remain ahead of our adversaries and protect Americans’ personal data.”
“Quantum computing is a rapidly advancing and promising technology, but it also poses new cybersecurity threats. The United States must be prepared for these cybersecurity challenges and remain the world leader is quantum technology,” said Senator Blackburn. “The National Quantum Cybersecurity Migration Strategy Act would ensure the federal government creates a road map to protect sensitive data and national security from emerging data security threats fueled by quantum computing.”
Although large-scale quantum computers capable of breaking current encryption are not yet available, experts warn that the rapid pace of development — combined with the potential for retroactive decryption — requires immediate action, said Blackburn. The bill cites the need to proactively transition federal systems to quantum-resistant standards to prevent future breaches of classified communications, financial data, and personal information.
“Quantum computing is a rapidly advancing and promising technology, but it also poses new cybersecurity threats. The United States must be prepared for these cybersecurity challenges and remain the world leader is quantum technology,” said Senator Blackburn. “The National Quantum Cybersecurity Migration Strategy Act would ensure the federal government creates a road map to protect sensitive data and national security from emerging data security threats fueled by quantum computing.”
The proposed strategy would leverage existing federal expertise through the Subcommittee on the Economic and Security Implications of Quantum Science (ESIX), which would be tasked with identifying critical systems in need of urgent protection. The bill also requires ESIX to define what constitutes a cryptographically relevant quantum computer — a technical threshold that would serve as a trigger for federal response — and to establish standardized performance metrics for measuring agency progress.
To jumpstart migration efforts, the legislation would initiate a pilot program requiring each federal agency to transition at least one high-impact system to quantum-safe encryption. It also calls for an assessment of which systems present the highest risk and prioritizes their transition.
Key Points: National Quantum Cybersecurity Migration Strategy Act
- Mandates a national strategy to counter quantum threats
The bill directs the White House Office of Science and Technology Policy to lead the development of a coordinated federal strategy to migrate critical systems to quantum-resistant encryption, anticipating future cyber threats from quantum computers. - Leverages existing interagency infrastructure
The Subcommittee on the Economic and Security Implications of Quantum Science (ESIX) is tasked with defining quantum risk thresholds, identifying at-risk systems, and establishing clear performance benchmarks for federal agencies. - Launches agency pilot programs
Each federal sector risk management agency must transition at least one high-impact system to post-quantum cryptography by January 1, 2027, serving as a pilot for broader migration efforts. - Defines ‘cryptographically relevant quantum computers’
The bill requires a formal definition of quantum systems capable of breaking current encryption, a key step in setting threat timelines and guiding federal responses. - Requires agency cost and readiness assessments
The Office of Management and Budget must assess the cost, personnel needs, and technical feasibility of post-quantum migration across agencies, including recommendations to support private-sector adoption. - Imposes Congressional reporting and oversight
The Office of Science and Technology Policy and OMB must report to Congress on progress within one year of enactment, followed by annual audits by the U.S. Comptroller General evaluating agency readiness against standardized benchmarks.
The bill builds on previous laws, including the National Quantum Initiative Act and the Quantum Cybersecurity Preparedness Act, which encouraged agencies to begin preparations. However, according to the bill’s authors, progress has been limited. Most federal data remains encrypted using legacy standards or is left unprotected entirely.
Supporters of the legislation argue that without coordinated action, federal networks risk falling behind as quantum capabilities advance globally. The bill aims to ensure that U.S. systems remain secure, competitive, and resilient as the cybersecurity landscape evolves.
