CSOs can’t afford to watch and wait: Google has upped the ante on PQC migration, Michela Menting, an analyst at ABI Research, tells CSO.That means that enterprises will also need to step up their transition plans, she says, “to align earlier than what they might have originally thought was acceptable based on the NIST deprecation timelines, especially if they want to keep pace with hyperscalers.”She expects Microsoft and AWS to set similar migration schedules, and CSOs will need to move their PQC transition plans up the priority list.”It’s not a side project anymore, with an extended time frame that they can just get to whenever they have extra time to work on it,” she says. “They really can’t afford to watch and wait anymore.”According to Google, some data is already being collected by attackers. In a post last month, Kent Walker, president of global affairs at Google and Alphabet, wrote, “Malicious actors are not waiting until a cryptographically relevant quantum computer is ready. They are likely already carrying out ‘store now, decrypt later’ attacks and collecting encrypted data, just waiting for the day when a quantum computer can unlock it.”This means that enterprises need to up their game. According to Gartner, 61% of organizations lack full visibility into their cryptographic systems. The research firm recommends that companies conduct a comprehensive cryptographic inventory, invest in cryptographic agility and visibility, establish a cryptographic center of excellence, and prioritize PQC migration for assets with long-term sensitivity.
First seen on csoonline.com
Jump to article: www.csoonline.com/article/4150887/google-the-quantum-apocalypse-is-coming-sooner-than-we-thought.html
