Singapore’s Cyber Security Agency (CSA) has told organisations exposed to quantum risks to have a plan to move to quantum-safe encryption in place by the end of 2027, and to finish the switch by 2035. The deadlines are set out in a CSA advisory published on 14 October 2026.
On the same day, CSA launched a Quantum-Safe Kickstarter Grant to help organisations test quantum-safe technology, The Straits Times reported. The size of the grant fund has not been disclosed.
Why this matters
Today’s encryption relies on maths problems that ordinary computers would take thousands of years to solve. CSA warns that a powerful enough quantum computer could break widely used methods such as RSA, ECDSA and DSA.
Experts estimate such a machine “could arrive within 5 – 10 years, though the exact timeline remains uncertain,” the advisory says. CSA also warns that attackers are expected to be stealing encrypted data now, so they can decrypt it later.
The milestones
CSA says Singapore is following a common international timeline: critical systems should finish migrating by 2031 and all other affected systems by 2035.
- Critical information infrastructure (CII): In June 2026 CSA gave CII owners, such as banks, energy firms and telecoms operators, a 2031 deadline to migrate their CII systems. According to The Straits Times, they must also submit formal migration plans to CSA by March 2027, and make sure newly bought systems support quantum-safe technology by January 2028.
- Other organisations: “Other organisations exposed to quantum risks are encouraged to complete migration by 2035,” the advisory says. They should have a migration plan by end-2027.
The advisory applies broadly to organisations that rely on digital systems, data or communications. Its first steps are to:
- identify sensitive data and internet-facing systems;
- name someone responsible for the migration;
- test quantum-safe algorithms; and
- ask vendors about their upgrade plans.
The grant
The Straits Times reported that the grant is open to all organisations, with priority for CII owners. It was announced by Josephine Teo, Singapore’s Minister for Digital Development and Information, on the second day of Singapore International Cyber Week.
Teo said: “With quantum, we are racing against time to replace cryptography within complex systems… (This) demands an early start.”
According to The Straits Times, the grant will:
- support pilots of up to six months;
- run from 1 November to 31 October 2027;
- prioritise projects on common problems, such as finding all the cryptography an organisation uses, migrating a whole application or upgrading older industrial systems; and
- require participants to report what they learnt.
What this means
- There are now dates to plan around. Singapore organisations exposed to quantum risks are expected to plan by end-2027 and finish by 2035, and CII owners face earlier deadlines.
- The funding is for testing. The grant pays for pilots, not for full migrations, and its total size is not public.
- Singapore is following other countries. CSA says its timeline matches common international deadlines.
Sources
- Cyber Security Agency of Singapore, “Advisory on Quantum-Safe Migration for Organisations”, 14 October 2026. https://www.csa.gov.sg/alerts-and-advisories/advisories/advisory-on-quantum-safe-migration-for-organisations/
- The Straits Times, “New grant to help Singapore critical services providers, others prepare for quantum threats”, 14 October 2026. https://www.straitstimes.com/tech/new-grant-to-help-singapore-critical-services-providers-others-prepare-for-quantum-threats
Related stories
- Germany Sets Its Post-Quantum Cryptography Timetable: High-Risk Systems to Switch by End-2030
- Post-Quantum Readiness: GAO Finds No Agency Fully Prepared as Chrome and OpenSSH Add Quantum-Safe Tools
- Google DeepMind and Singapore Build a Scam Detector That Runs on Your Phone
- Google Meet Starts Using Post-Quantum Cryptography to Protect Calls
- Coinbase Sets Out What It Wants From Bitcoin’s Move to Quantum-Safe Signatures
- Lattice Launches Sentry 5.0, a Post-Quantum Firmware Security Stack for AI Data Centres
