PQC (Post-Quantum Cryptography) 09-30-2025

2 Award-Winning Approaches to Enterprise Quantum Security

Timothy Hollebeek
WQRD Award Blog Hero

Quantum computing promises major breakthroughs, but it also poses real risks to the security of today’s data. The threat of “harvest now, decrypt later” attacks means that sensitive information encrypted today could be exposed once quantum computers reach maturity. For enterprises, the time to prepare is now.

Two organizations— and —are showing what it looks like to move beyond theory and embed quantum readiness into daily operations. Their approaches highlight how business leaders can combine governance, technology, and culture to build a sustainable path to a quantum-safe future.

Migros: Embedding quantum readiness into enterprise culture

Migros, one of Switzerland’s largest food retailers, began its quantum readiness journey by partnering with IBM Rüschlikon to assess the risks posed by quantum computers in the years ahead. From this foundation, the company set a clear goal: achieve quantum readiness by 2030. To get there, Migros established a center of excellence and designed a strategy that balances education, governance, and technical innovation.

That strategy includes eLearning programs, live technical demonstrations, and binding security policies adopted at the executive level. By applying a risk-based prioritization model, Migros secures new assets from the start while managing existing ones according to their data sensitivity. A key pillar of this approach is the adoption of hybrid cryptography, which ensures continuity and resilience as post-quantum cryptography (PQC) standards are introduced.

Migros also emphasizes measurement and accountability. Governance and reporting tools track progress, while automated solutions analyze encryption in transit. With strong executive sponsorship and collaboration across teams, quantum readiness has become more than a technical project—it’s embedded into the culture of the company.

NTT DATA: Operationalizing readiness at scale

NTT DATA,a global leader in digital business and technology services, has taken a different but equally comprehensive path by making quantum readiness an operating discipline within its insurance services platform. Using Trust Lifecycle Manager, the company continuously inventories certificates and cryptographic dependencies across its infrastructure in Japan, focusing on long-lived and sensitive data flows most vulnerable to future decryption.

To build agility, NTT DATA has operationalized short-lived 47-day certificates. This practice allows teams to rehearse rapid certificate rotation, automated issuance, and consistent policy enforcement, ensuring that cryptographic agility is part of normal operations. At the same time, the company has adopted hybrid cryptography by default, enabling both classical and PQC modes to maintain availability and interoperability across multi-cloud and sovereign-cloud environments.

NTT DATA is also advancing governance across AWS, Azure, and Google Cloud, and openly sharing lessons learned on multi-cloud monitoring to strengthen ecosystem readiness. Beyond its own infrastructure, the company is influencing the industry: It published a PQC migration white paper in 2023, engaged regulators and financial institutions, and in 2025 delivered its first PQC consulting service. These steps demonstrate that NTT DATA views quantum readiness as a long-term discipline, not a one-time migration.

Lessons for enterprises

Migros and NTT DATA offer two different models but share common themes. Both started with a clear-eyed risk assessment and built strategies that combine technical adaptation with governance. Both treat hybrid cryptography as the bridge to a quantum-safe future. And both recognize that readiness is not only about IT—it requires executive leadership, cultural adoption, and continuous measurement.

Their leadership has also been recognized: Migros was named the winner of the 2025 Quantum Readiness Award, with NTT Data honored as a finalist. Together, they set an industry benchmark for what practical, enterprise-wide quantum readiness looks like.

Organizations preparing for PQC migration can draw from these examples: Begin planning now, embed readiness into daily operations, and prioritize agility alongside security. By taking these steps, enterprises can ensure they’re not only prepared for quantum computing but are leading the way in shaping a secure digital future.

Chart your path toward quantum readiness

Building a secure roadmap requires shared knowledge paired with the right tools. See how can help by exploring our post-quantum security solutions, or take a deep dive with industry experts by .

Subscribe to the blog