Education for boards, executives and their teams
Live workshops and bespoke in-house training on post-quantum security, with AI safety and cyber alongside it.
Why leaders need to understand this
Public-key cryptography protects payments, identity and communications across almost every organisation. Quantum computers that can break it have not been built yet. But moving to replacement standards takes years, and encrypted data can be stolen now and read later. We teach the people who have to plan for that.
AI adds a second set of questions for leaders: how it changes the cyber threat, and how to use it safely. We cover both, with post-quantum cryptography as our main subject.
Who it is for
Boards and executives
Our main audience, particularly in medium and large organisations. The aim is that you can ask the right questions of suppliers and your own teams, set priorities and budgets, and hold a migration programme to account.
Wider workforce
Awareness for the people who buy, build and manage systems, so cryptography is treated as a decision and not an afterthought.
Security and IT practitioners
Working knowledge for the teams who will find where cryptography is used, assess it and plan the move to the new standards.
What we cover
Post-quantum cryptography
Our main subject. What quantum computing changes for encryption, the new NIST standards, the NCSC timeline to 2035, and how to plan a migration that runs for years.
AI safety and cyber
A second strand. How AI changes cyber risk, and what safe, well-governed use of AI looks like in an organisation, in plain language for leaders.
Formats
Live workshops
Interactive sessions led by an instructor, with time for questions. Good for building a shared understanding across a leadership team or a group of teams.
Bespoke in-house training
Content built around your sector, your suppliers and the systems you run, and delivered to your people. We agree the scope, audience and length with you.
What a session covers
Content is adapted for each audience. These are typical outlines.
Post-quantum cryptography, for a board
- What quantum computing changes for encryption, and what it does not.
- Why data stolen today can matter later, and how to tell which of your data has a long shelf life.
- The new NIST standards (FIPS 203, 204 and 205) and the NCSC timeline of 2028, 2031 and 2035.
- What to ask your suppliers, and what a good answer looks like.
- Governance: who owns the work, how to budget for a multi-year programme, and what to ask to see reported.
AI safety and cyber
- How AI changes the cyber threat: what attackers can do faster, and what defenders can do.
- Where AI is already used in your organisation, including tools staff adopt without being asked.
- The data, supplier and governance questions to ask before AI goes into a business process.
- Who owns AI risk, and what a board should ask to see reported.
Why the new standards are hard to break
The new NIST standards ML-KEM and ML-DSA are built on lattice problems like the one shown here: find the point nearest the ring. It is easy in two dimensions. In the hundreds of dimensions real systems use, no efficient method is known, classical or quantum.
We explain this at the level your audience needs, from a one-page analogy for a board to the detail a security team can work with.
What leaders learn to oversee
The migration journey
Five stages every post-quantum programme goes through. Our sessions show leaders what each one involves and what to ask for.
- 1
Find your cryptography
Most organisations do not know everywhere they use cryptography. An inventory of systems, protocols, certificates and keys comes first. It is the heart of the NCSC’s first milestone, 2028.
- 2
Decide what moves first
Rank systems by how long their data must stay secret and how critical they are. Long-lived secrets are the ones that harvesting puts at risk.
- 3
Ask your suppliers
Much of your cryptography sits inside products you buy. Ask suppliers for their post-quantum plans and dates, and build the answers into contracts.
- 4
Migrate, starting hybrid
A common first step is hybrid key exchange: a conventional method and ML-KEM combined, so a connection stays protected if either one is broken.
- 5
Prove progress
Boards need evidence: what has moved, what is left, and whether the plan meets the 2031 and 2035 milestones.
Questions leaders ask
Has a quantum computer broken encryption yet?
No. Computers able to break the public-key cryptography in use today have not been built. But estimates of what such a machine would need keep falling. In March 2026 Google Quantum AI estimated that the machine needed to break the elliptic-curve cryptography behind much of the web is about 20 times smaller than earlier estimates suggested: under 500,000 physical qubits, a qubit being the basic building block of a quantum computer.
If it has not happened, why act now?
Two reasons. Migration takes years: the NCSC gives UK organisations until 2035. And encrypted data can be copied today and read later, once the machines exist. That matters for anything that must stay confidential for many years.
What are the new standards?
In August 2024 NIST finalised FIPS 203 (ML-KEM, for encryption), FIPS 204 (ML-DSA, for digital signatures) and FIPS 205 (SLH-DSA, a second signature standard). In August 2026 the IETF published RFC 10024, which sets out how to combine ML-KEM with a conventional key exchange in TLS 1.3.
What does the NCSC expect of UK organisations?
Three milestones. By 2028: discover what cryptography you use, set migration goals, draw up a plan and tell your suppliers what you need. By 2031: complete the highest-priority migrations. By 2035: finish. Read the NCSC timelines.
How much of this is our own work?
It depends on what you build and what you buy. The NCSC expects smaller organisations to get most of their migration through supplier updates, but says custom software should follow the same timetable as larger organisations.
Our sessions help you work out where you sit, and which suppliers and systems need the most attention.
Where does AI fit in?
AI adds a second set of questions for leaders: how it changes the cyber threat, and how to use it safely. We teach both, with post-quantum cryptography as our main subject.
How do we arrange a session?
Use the enquiry form below or email team@quantumsafefutures.com. Tell us who needs to be in the room and what they need to understand, and we will reply about format and timing.
Where does your organisation stand?
Five questions, based on the first NCSC milestone. Your answers stay in your browser: nothing is sent or stored.
- Do you know where your organisation uses public-key cryptography, in its own systems and in what it buys?
- Do you know which of your data must stay confidential for ten years or more?
- Have you asked your most important suppliers about their post-quantum plans?
- Is one named executive accountable for the migration?
- Has your board or executive team been briefed on the NCSC’s 2028, 2031 and 2035 milestones?
Enquire about a session
Tell us a little about your organisation and what you need. We will reply by email.
Prefer email? Write to team@quantumsafefutures.com.