>_ Skip to main content
Menu
Search
Post-Quantum Security

US Treasury Launches Quantum-Readiness Task Force


On August 24, the US Treasury announced the formation of a Quantum-Readiness Task Force. This initiative will coordinate the financial sector’s transition to post-quantum cryptography, following Executive Order 14412 signed in June, which mandates enhanced cryptographic protections across federal systems and critical infrastructure. The task force is a coordinating group with three distinct workstreams, though it currently lacks a disclosed budget, timeline, or binding mandate for any participating institution.

Understanding the task force’s role

According to the August 24 announcement, the Treasury describes this as a public-private initiative, bringing together government agencies, banks, market infrastructure operators, and technology vendors. Its stated objectives are to align the sector on adopting quantum-safe algorithms, assess the readiness of third parties and vendors, and analyze risks associated with digital assets. These goals are structured within three workstreams: Sector Alignment & PQC Transition, Third-Party & Vendor Readiness, and Digital Assets and Emerging Technology Risk.

However, these objectives don’t yet constitute official regulations. A coordinating body like this typically generates guidance and identifies priorities, with concrete outcomes emerging later. The announcement doesn’t specify funding, a deadline for sector-wide migration, or any enforcement mechanisms. It builds upon the G7 Cyber Expert Group’s roadmap for post-quantum cryptography, which itself serves as a framework.

The necessary standards are already in place. NIST published its post-quantum cryptography standards: FIPS 203, 204, and 205 in 2024. These standards will be the foundation for any financial sector migration. The Task Force’s role is not to alter these standards but to facilitate a unified approach to adoption within a fragmented sector.

The threat landscape

This entire endeavor addresses a machine that doesn’t yet exist: a cryptographically relevant quantum computer capable of breaking RSA or elliptic-curve encryption. No such machine has been built, and there is no public evidence to suggest one is imminent. The primary concern is “harvest-now-decrypt-later,” where adversaries collect encrypted data today and store it, anticipating future hardware that can decrypt it. This potential threat provides a compelling reason to initiate migration early, explaining why the discussion centers on preparation rather than immediate response.

In the official release, Treasury Assistant Secretary for Financial Institutions Luke Pettit linked this effort to national security.


“The Financial Sector Quantum Readiness Task Force will help ensure that the transition to quantum-safe technology is coordinated, risk-based, and operationally resilient.”

Secretary Scott Bessent and Deborah Guild of PNC, who chairs the Financial Services Sector Coordinating Council, also endorsed the launch. All three are the directly-involved parties in the initiative they are describing. The announcement primarily establishes a structure and sets priorities; the actual migration work and any measurable results are still in the future.