This roundtable explores the looming threat of quantum computing, which promises a paradigm shift in computing power capable of breaking classical encryption standards like RSA through the implementation of Shor's algorithm. This presents a critical "harvest now, decrypt later" risk, where adversaries intercept and store encrypted data today to be decrypted once quantum computers become sufficiently powerful. The participants emphasize that while this is not an immediate, doomsday scenario, it is a significant, looming issue that requires a shift in how organizations approach data protection, risk management, and long-term cryptographic planning.

The discussion pivots heavily toward the economic and strategic realities of implementing post-quantum cryptography (PQC). Experts argue that the transition is not purely a technical challenge but an exercise in triage, necessitating that organizations conduct thorough data inventories to prioritize the protection of sensitive assets based on business outcomes, regulatory requirements, and potential reputational damage. While some practitioners push for an immediate, sweeping adoption of PQC algorithms, others caution that resource constraints, the complexity of upgrading global infrastructure, and the reality of competing security priorities--such as identity management and legacy system vulnerabilities--make a measured, risk-based approach more practical for most enterprises.

Ultimately, the group concludes that the transition to quantum-safe environments will likely be driven by regulatory pressure and the need for standardized compliance rather than proactive, voluntary investment alone. Drawing parallels to Y2K and IPv6, participants note that until governing bodies or industry leaders establish firm mandates and clear consequences for non-compliance, widespread adoption will remain sluggish. The roundtable underscores the importance of starting these conversations now, encouraging security professionals to educate their stakeholders and integrate PQC transition plans into their roadmaps to ensure that organizations are prepared for the "Q Day" when quantum capabilities become commercially viable.

Moderated by Tom Hollingsworth, Event Lead. Recorded live at Security Field Day 15 in Santa Clara, CA on April 30, 2026. Watch the entire presentation at https://techfieldday.com/appearance/security-field-day-15-delegate-roundtable-discussion/ or visit https://TechFieldDay.com/event/xfd15 or https://FuturumGroup.com for more information