cyber security IT Services

GAO Report: Cybersecurity Leadership Needed for Quantum Threats

GAO cybersecurity quantum computers security

The U.S. Government Accountability Office (GAO) recently released a report about quantum computing and it’s impact on national cybersecurity. The November 21st report noted “that a quantum computer capable of breaking cryptography” may be developed in the next 10 years.

The development of a “cryptographically relevant quantum computer (CRQC)” could shake the very foundation of cybersecurity as we know it. This isn’t just tech talk. If we’re not careful, it could impact everything we rely on to keep information secure. It would range from your personal emails to critical national infrastructure.

Cryptography and Quantum Computers

How does the tech world keep hackers from seeing your private information? They use cryptography, which is a complex code that jumbles up your data so no one else can read it. Right now, these codes are pretty tough to crack. Average computers today would need millions of years to break them.

“Federal agencies and our nation’s critical infrastructure—such as energy, transportation systems, communications, and financial services—rely on cryptography (e.g., encryption) to protect sensitive data and systems,” notes the report.

Enter a technological breakthrough: quantum computers. These are special machines that within 10 to 20 years will be able to break these tough codes in just hours. The GAO was asked to examine the federal government’s strategy to address the threat that quantum computers pose to cryptography.

The GAO’s Key Findings

The GAO report dives deep into this issue, highlighting some key points worth taking note of. Firstly, the tools we depend on for keeping our digital world secure are quickly becoming outdated. Basically, cryptographic methods have been reliable and have seen little change. Quantum computing, on the other hand, will change the entire game board.

The GAO identified three key goals in the U.S. government’s emerging strategy to tackle this quantum threat:

  1. Standardize post-quantum cryptography (PQC): Develop new cryptographic standards that quantum computers can’t break.
  2. Migrate federal systems to these new standards: This means updating the systems federal agencies use, which is no small task.
  3. Encourage all sectors to prepare for the threat: This doesn’t just concern tech giants or governmental bodies. It involves everyone.

The scary part is that while progress is being made, the report suggests we don’t have a single team in charge of overseeing this crucial task within the government. That could mean slower progress and disjointed efforts—something we can’t afford if we want to stay ahead.

What Other Countries Are Doing

The U.S. isn’t alone in facing this challenge. The GAO report mentions that several international bodies, like the North Atlantic Treaty Organization and tech companies like Apple and Google, are already taking steps to integrate post-quantum cryptography. They’re even trying a hybrid model that uses old and new methods simultaneously to double down on security. It’s like wearing both a belt and suspenders—extra support.

The Role of Leadership and Strategy

“This GAO report emphasizes the urgent need to embrace post-quantum approaches,” states Maria Chamberlain of Acuity Total Solutions. “We can’t afford to have a wait-and-see approach. One breakthrough and that 10-year cushion could evaporate. Coordination at the federal level is essential to face this imminent threat head-on.”

Currently, no single federal organization is responsible for the U.S. strategy’s coordination.

The GAO believes the National Cyber Director should take charge. Having a central authority could ensure that everyone involved knows what’s expected and how to prepare.

Respecting the Threat

The good news is that government and big business have identified the threat and are taking it seriously. After all, our very infrastructure is at risk. The crypto community, federal agencies, and tech companies are actively working on potential solutions.

It’s going to be a journey, but there is hope. By working together and staying informed, we can transition to new methods that keep our data safe.

Facing the Future in an Organized Way

Technological advancement always brings both promises and new challenges. The potential benefits of quantum computing is vast. Yet it’s essential to address its risks earnestly and urgently.

Who takes the lead in that effort remains to be seen. The GAO’s suggestion to centralize national strategy though the Office of the National Cyber Director could be an important step.

To read the GAO’s report, click HERE

Author

Acuity Manager

Acuity Total Solutions provides complete facility support from IT solutions to Cybersecurity, and Landscaping to Custodial. From Dirt to Data, Acuity is the total solution.