G7 CEG roadmap for transition to post-quantum cryptography in financial services

HM Treasury has published a statement from the G7 Cyber Expert Group (CEG) setting out a high‑level, non‑binding roadmap for a coordinated financial‑sector transition to post‑quantum cryptography (PQC). Building on its previous 2024 statement, the CEG highlights while quantum computing promises significant new capabilities for financial services, these advanced computers will be capable of breaking widely-used cryptographic protocols that protect systems and data. Therefore, the CEG explains how the financial sector should start preparing for this in advance of risks. The roadmap outlines a phased approach for both financial sector entities and public authorities for planning and coordination. It highlights key migration activities including awareness and preparation, discovery and inventory, risk assessment and planning, migration execution, testing and ongoing validation and monitoring. Although not legally binding, the CEG encourages firms to begin planning now. It notes that many jurisdictions currently reference 2035 as an overall target for full migration, with the most important systems ideally upgraded earlier (around 2030–2032). While the trajectory of quantum computing development is uncertain, the statement conveys it may be helpful for organisations to establish comparable migration timelines to ensure their milestones can be achieved prior to the availability of cryptographically relevant quantum computers. The CEG further encourages ongoing monitoring, cross sector information sharing and close coordination with international standard setting bodies to support a harmonised transition to PQC.

Return to main website.