The Cyber Security Agency of Singapore (CSA) has issued guidance on quantum-safe migration milestones for organisations in Singapore, setting 2031 as the target to complete migration for Critical Information Infrastructure (CII) systems and encouraging other organisations exposed to quantum-related cyber risks to complete migration by 2035.
The guidance, announced by Minister for Digital Development and Information and Minister-in-charge of Cybersecurity and Smart Nation Group Josephine Teo at Singapore International Cyber Week 2026, also includes a new Quantum Safe Kickstarter Grant intended to support organisations to pilot quantum-safe solutions and take practical steps towards migration, with priority given to CII owners.
CSA said advances in quantum computing could eventually undermine commonly used cryptographic methods that protect digital communications, transactions and sensitive information. While it remains uncertain when quantum computers will be capable of breaking these methods, CSA said organisations should begin preparing for the transition.
CSA described quantum-safe migration as complex, noting cryptography is embedded across applications, networks, infrastructure and interconnected systems, often involving multiple technology vendors. It said organisations would need time to identify cryptographic dependencies, assess risks, test suitable solutions and implement changes without disrupting operations, particularly for critical infrastructure and legacy systems.
As part of Singapore’s risk-based approach, which prioritises CII systems, CSA noted it issued quantum-safe migration guidance to CII owners in June 2026 that included milestones and a 2031 completion target for CII systems.
For other organisations exposed to quantum threats, CSA said a new advisory recommends putting in place a quantum-safe migration plan by 2027 and aiming to complete migration by 2035, which it said aligns with international guidance. CSA said this category includes organisations holding sensitive information requiring long-term confidentiality, and those providing services such as communications and digital transactions where integrity and confidentiality are essential.
CSA said the advisory sets out steps organisations can take now, including assessing risk exposure, identifying critical systems, and engaging technology vendors and partners to understand available quantum-safe solutions. It also pointed to an updated Quantum Readiness Index and Quantum-Safe Handbook, which it said incorporate feedback from public consultation and reflect developments in quantum-safe cryptography standards.
The Quantum-Safe Kickstarter Grant will run from 1 November 2026 to 31 October 2027, with each funded pilot lasting up to six months. CSA said the grant is open to all organisations but will prioritise CII owners.
CSA said pilot use cases expected to be prioritised include end-to-end migration of an application or system, cryptographic discovery and inventory, and migration of operational technology (OT), legacy and infrastructure-heavy systems. Pilot participants will be required to submit a report of their learnings and demonstrated impact, and applications will be assessed by CSA for eligibility, scope, alignment and strategic value.
CSA’s advisory and supporting resources are published on its website.
