On June 22, President Donald Trump signed two executive orders designed to accelerate United States leadership in the global quantum computing race. The first establishes a national initiative to develop a quantum computer capable of performing mission‑critical scientific calculations by 2028. The second directs federal agencies to migrate to post‑quantum cryptography (PQC) by Dec. 31, 2031 — an essential step in protecting sensitive data from future quantum‑enabled attacks capable of breaking today’s encryption.

Quantum computing is a true double‑edged sword. It promises breakthroughs across science, defense and industry, but it also introduces one of the most significant cybersecurity risks of the modern era. The administration’s dual executive orders create a long‑overdue, legally binding framework that connects commercial innovation goals with national security priorities.

What the executive orders get right

The most important achievement of these orders is their explicit recognition of urgency. Quantum readiness has long been treated as a future problem, yet adversaries are already harvesting encrypted data today with the expectation of decrypting it once quantum systems mature.

By setting a target for a “commercially relevant” quantum computer by 2028 and mandating PQC migration by 2031, the directives directly confront the growing “harvest now, decrypt later” threat.

The orders also require critical infrastructure operators, space systems, and defense agencies to adopt quantum‑enabled sensors and communications technologies within five years — a timeline that could reshape national resilience. Quantum sensing may detect infrastructure failures and security anomalies with unprecedented accuracy, while quantum‑ready communications could strengthen systems operating in contested or high‑risk environments, including defense networks and deep space missions.

Equally important, the directives acknowledge that achieving quantum advantage requires more than research. It demands coordinated execution across federal agencies, commercial innovators, technology vendors and infrastructure operators. Establishing deadlines introduces accountability and pushes stakeholders to shift from experimentation to deployment.

Where the executive order falls short

Despite their strengths, the orders leave major implementation challenges unresolved, particularly around supply chains, unfunded mandates and the scarcity of specialized engineering talent.

Although they call for National Quantum Workforce Development Institutes and domestic manufacturing strategies, they stop short of providing immediate capital pathways for the mid‑tier defense contractors, technology providers, and infrastructure vendors expected to implement these transformations.

For the cybersecurity sector, this creates immediate pressure. Demand for National Institute of Standards and Technology‑approved PQC solutions, discovery tooling and migration expertise will surge. Yet, no funding mechanism exists to support this shift. What was once a decade‑long modernization roadmap has now become a high‑stakes five‑year sprint.

And importantly, the real test of these executive orders will come during implementation. The headlines are a strong first step, but the devil is in the details. Only once the policies are interpreted, defined, and operationalized will we truly understand their effectiveness.

As standards and execution plans take shape, it’s critical that the industry remains actively engaged in the process. Without broad participation, policymaking risks being shaped by a narrow set of stakeholders who may also be the primary financial beneficiaries. Quantum security must be about protecting the nation and its people — not creating new profit centers — and the implementation process must reflect that mission.

Ultimately, the gap between mandate and execution will determine whether these directives strengthen national security or introduce new vulnerabilities. Mid-tier vendors will need access to capital. Agencies will need scalable workforce pipelines. And the technology sector will need funding mechanisms aligned with the magnitude of the challenge the government has now acknowledged.

What federal agencies must do now

These executive orders are an important catalyst, but they cannot serve as the sole guardrails for quantum readiness. Regardless of how implementation guidance evolves, agencies should begin acting on three foundational pillars immediately.

1. Cryptographic discovery
   Agencies must establish a comprehensive inventory of all systems, applications, devices, and workloads that rely on vulnerable encryption. Without visibility into cryptographic dependencies, prioritization and migration planning will be ineffective.
2. Infrastructure modernization
   Transitioning to PQC will require substantial hardware, software, and architectural updates to support NIST‑certified algorithms. Many legacy environments were never designed to accommodate the computational and operational demands of next‑generation cryptography.
3. Crypto‑agility
   Organizations must implement crypto‑agile architectures capable of rapidly replacing cryptographic components as standards evolve. A modular, flexible approach prevents future technology shifts from requiring costly, large‑scale redesigns.

Turning quantum ambition into execution

The new executive orders reflect a critical truth: Quantum technology is no longer a research‑only pursuit. It is a near‑term strategic priority with direct implications for national security, economic competitiveness and digital resilience.

But deadlines alone won’t deliver readiness. Success depends on whether agencies can transform policy into execution — funding implementation, strengthening supply chains, developing the workforce, and partnering with industry leaders capable of guiding this transition. The nation’s ability to navigate the quantum era will hinge not just on ambition, but on disciplined, collaborative and well‑resourced execution.

Dan Wilbricht is president of Optiv + ClearShark.

Copyright © 2026 Federal News Network. All rights reserved. This website is not intended for users located within the European Economic Area.