What every board member should know about Quantum, before it's too late - opinion

In today's rapidly evolving technological landscape, understanding the implications of quantum computing is no longer optional, especially for those at the helm of enterprises. As highlighted in this opinion piece, senior board members must grapple with the "quantum threat" and ask the right questions, moving beyond the hype and dense technicalities.

“

Esti, forget the hype for a moment. What should I actually be doing, right now, as a board member?

The conversation around quantum security often polarizes between breathless speculation and impenetrable jargon. However, for board members, the focus should be on actionable understanding. This means grasping the core differences between two key concepts: Post-Quantum Cryptography (PQC) and Quantum Key Distribution (QKD).

“

The quantum conversation has a problem. It oscillates between two extremes: breathless science-fiction on one end, and dense technical jargon on the other. Neither serves the people who need to act.

PQC addresses a software problem by developing new encryption algorithms resistant to quantum attacks. Crucially, PQC can be implemented on existing hardware and networks, making it a more accessible upgrade for most organizations. The U.S. National Institute of Standards and Technology (NIST) has already published initial PQC standards, signaling that this transition is well underway.

“

Board members are not cryptographers. They don’t have to be. But they do need to understand enough to ask the right questions of management, and to know whether the answers they're getting are serious ones.

QKD, on the other hand, is a fundamentally different, physics-based approach. It uses quantum mechanics to distribute encryption keys, making any eavesdropping attempt detectable. While offering a robust security guarantee, QKD requires dedicated infrastructure, such as fiber optic cables or satellite links, and is currently expensive and limited in range, making it less of a plug-and-play solution for widespread internet security compared to PQC.

“

Post-Quantum Cryptography (PQC) is the answer to a software problem... PQC replaces them with new mathematical algorithms, specifically designed to be hard for quantum computers to break.