Quantum computing, for all its multiverse-Marvel-esque complexity, is no longer the stuff of comic books or science fiction. It’s here, and its implications are as vast and complex as the multiverse itself – especially when it comes to cybersecurity.

Much like the Marvel Cinematic Universe, the world of quantum computing is full of enigmatic figures. These key stakeholders – ranging from CISOs, cybersecurity practitioners, to customers and constituents – each play unique roles in our quantum saga, and must possess a deep understanding of the unfolding quantum reality.

CISOs

• Should staff their organizations with individuals who are knowledgeable about regulatory standards like NIST and ENISA, and aware of quantum advancements in both security and threats.
• Act as a bridge between those who monitor quantum developments and organizational members like data owners, data protection officers, etc.
• Be responsible for initiating efforts to assess quantum computing risks and modify processes to accommodate these capabilities.
• Need to champion quantum computing concerns within the organization, especially with corporate leadership.
• Develop and implement crypto governance in line with legal, regulatory, and internal guidance to account for quantum risk.
• Get involved in conversations with standards bodies to help shape developing standards.
• Identify and onboard practitioners who can implement cybersecurity and privacy policy.

Cybersecurity and Privacy Practitioners

• Must stay updated with quantum developments, standards, and products.
• Need to determine what data requires protection and how to implement this with future-proof strategies.
• Should have a high level of quantum awareness and understand the implications of advancing quantum computing technologies.
• Must acquire knowledge about upcoming quantum technology-based solutions and services.
• Need to align their technical decisions with overarching organizational goals.
• Should research, learn, and utilize new quantum-resistant and crypto-agile tools.
• Can participate in public/private partnerships and industry events to expand their quantum-based knowledge.

Customers and Constituents

• Should be aware of quantum computing and its potential impact.
• Need to understand the data protection policies and rights of organizations that hold their data.
• Should begin learning about quantum technology and its impact on cybersecurity.

When tackling quantum risk, organizations should approach it like any other cyber risk – analyzing the threat and evaluating mitigation measures. The impact of this threat is potentially high, and the timeline is uncertain. Therefore, starting this analysis process early is crucial.

Confidential information intercepted now could be stored and decrypted in the future when quantum technology matures. If this confidential information needs to remain secret beyond the expected maturity of quantum computing, immediate action is necessary.

Defenses against quantum threats are also under development. Post-quantum cryptography or quantum-resistant cryptography uses complex mathematical problems that cannot be easily solved by quantum computers. Ideally, these systems should be compatible with current communication protocols and networks, enabling a smooth transition to quantum-resistant cryptographic algorithms when they’re available.

It’s also worth noting that the timelines of quantum computing availability and the deployment of post-quantum cryptography algorithms could intersect. This might result in a period of significant risk where quantum-based attacks could become prevalent while defenses are still under development.

International standards that take into account effective quantum computing are still being developed, standardized, and implemented. These standards are essential, given that quantum-based attacks may outpace the development of secure quantum-resistant cryptography. We may face a future where quantum-based attacks are widely available while practical defenses against them are limited.

Quantum computing brings risks, but it also offers potential cybersecurity benefits. Quantum key distribution, quantum communications, quantum random number generators, and quantum machine learning can all play a part in enhancing cybersecurity and data privacy. These technologies are rapidly developing and hold promise for significant impact in cybersecurity.

The quantum era is here, and it’s reshaping our cybersecurity landscape. The quantum realm might not have superheroes like the Marvel multiverse, but the roles everyone plays – CISOs, cybersecurity practitioners, and customers alike – are no less important. Just as the Avengers are essential to saving the Marvel multiverse, these key stakeholders are critical to safeguarding our cybersecurity landscape in the quantum era.