G7 Makes Quantum Shift a Cybersecurity Priority

The G7 has issued an urgent call for governments and organizations worldwide to speed up the shift to post-quantum cryptography (PQC), framing the threat from quantum computing as no longer distant but a pressing issue. In a document released under France’s 2026 G7 presidency, the group warns that the time to act is now, before quantum computers become capable of breaking current encryption standards.

From Future Risk to Imminent Danger

According to the document, the public and private sectors must “reframe” the quantum threat “from a distant future problem” to “a near-term threat that demands action across all sectors, not just critical infrastructure.” This language signals a significant shift in tone, urging proactive measures rather than reactive ones.

“We recognize the growing threat that quantum computing poses to public-key cryptography, and the security of both public and private organizations,” the document states. “Although the exact timeline is uncertain, several recent advances suggest an anticipation of the development of quantum computers able to break widely used public-key cryptography mechanisms and threaten the security of digital infrastructures.”

Prioritizing Critical Assets

To mitigate these risks, the document advises governments and organizations to first identify systems holding the most critical data and assets, then prioritize PQC transition efforts accordingly. This risk-based approach is essential to manage quantum risk effectively, as resources should be directed where impact is greatest.

The emphasis on proactive action, rather than waiting for quantum computers to become a confirmed reality, underscores the need for readiness. The document argues that early preparation is crucial, as the timeline for quantum advancement remains uncertain but advances are accelerating.

Phased Transition Strategy

The recommendations call for a phased and risk-based strategy, starting with an inventory of cryptographic assets and mapping dependencies. This foundational step enables organizations to develop a comprehensive transition plan that addresses all interconnected systems, reducing the risk of overlooking critical components.

To limit transition-related costs, the document suggests purchasing products that already integrate PQC and replacing systems as part of standard renewal schedules. Starting the transition early could lead to lower migration costs overall, as organizations can incorporate quantum-safe upgrades into existing procurement cycles.

Five Action Priorities for Governments

• Raising awareness about quantum threats
• Developing national strategies for PQC transition, including goals for an “adequate supply of PQC hardware and software products” and encouraging adoption
• Focusing R&D on advancing PQC through innovation and practical solutions
• Developing public-private partnerships between government, industry, and academia
• Integrating PQC into cybersecurity requirements

These priorities provide a roadmap for policymakers, emphasizing the need for coordinated efforts across sectors.

Global Endorsement

This call to action came from the national cybersecurity agencies of all G7 member-states, including Canada, France, Germany, Italy, Japan, the UK, and the US, with support from the European Commission and the EU Agency for Cybersecurity (ENISA). This broad backing underscores the international consensus on the urgency of the issue.

The document‘s release follows earlier announcements from ANSSI, France's cybersecurity agency, which has been vocal about the need for quantum readiness.

ANSSI’s Upcoming Mandates

ANSSI has already signaled its commitment by announcing it will stop vetting products that lack quantum-safe encryption starting in 2027, with post-quantum security becoming mandatory for some security products by 2030. These deadlines set a clear timeline for compliance.

This move reflects a growing recognition among national agencies that the transition cannot be delayed indefinitely. By setting concrete dates, ANSSI is pushing manufacturers and organizations to accelerate their preparations.

Preparing for the Quantum Era

The G7’s call to action is not just for governments; it also targets the private sector. Vendors are being urged to develop and integrate PQC into their products, ensuring that quantum-safe solutions are available and adopted widely.

The document highlights the need for an adequate supply of compliant products, which will require significant investment and innovation. Early adopters may find themselves at an advantage, both in terms of security and market positioning.

Why It Matters Now

This coordinated push suggests that the window for proactive preparation is closing. For organizations, the message is clear: waiting until quantum computers are a reality will likely mean scrambling to secure systems already at risk. The cost of inaction could be far higher than the investment required to transition now.

By following the G7’s guidance, businesses and governments can mitigate the potential fallout from a quantum leap in computing power, protecting sensitive data and maintaining trust in digital infrastructures.