Quantum Leap: New Executive Orders Signal Opportunity and Risk in Quantum

Key Takeaways

• Two recent executive orders reflect the federal government’s dual-track quantum strategy: accelerating innovation while mandating cybersecurity transition.
• Post-quantum cryptography (“PQC”) is moving from planning to near-term compliance. Federal agencies must meet defined migration timelines, with expectations likely cascading to contractors, vendors, and critical infrastructure operators.
• Commercial opportunity and enforcement risk are rising in parallel. While companies can expect increased funding, partnerships, and procurement opportunities, they also face heightened exposure and litigation risk around cybersecurity representations, supply chain integrity, export controls and other compliance issues.

The June 22 Executive Orders

On June 22, 2026, the White House issued two closely related executive orders that together substantially raise the stakes for companies, universities, federal contractors and critical infrastructure operators working in or around the quantum ecosystem. One order, Ushering in the Next Frontier of Quantum Innovation, is aimed at accelerating U.S. leadership in quantum information science and technology through a whole-of-government strategy focused on commercialization, deployment, workforce development, trusted supply chains and counterintelligence protections. The other, Securing the Nation Against Advanced Cryptographic Attacks, is aimed at accelerating the federal government’s transition to post-quantum cryptography (PQC) and pushing that transition outward to critical infrastructure and the federal supply chain.

Read together, the orders reflect a dual-track national strategy. The administration is attempting to speed the arrival of commercially and strategically useful quantum capabilities, while also hardening federal systems and sensitive sectors against the cryptographic risks that scalable quantum computing could create. The result is not merely another round of research-and-development policy; it also is a coordinated industrial, cybersecurity, procurement and national security initiative that is likely to shape government funding, compliance expectations and enforcement risk over the next several years.

The Quantum Innovation Order: Commercialization, Deployment and Strategic Control

The order directs a comprehensive, whole-of-government approach to quantum innovation:

• First, it mandates an update to the National Quantum Strategy, with a focus on accelerating “quantum-enabling technologies” and strengthening partnerships between the federal government, private industry and academic institutions. This reflects a clear policy shift toward tighter coordination and centralized prioritization of quantum initiatives.
• Second, the order launches a flagship national effort to develop a next-generation, “science-scale” quantum computer capable of enabling transformative scientific discovery and driving commercial applications. The initiative requires federal agencies to assess technical requirements, evaluate existing capabilities and develop detailed specifications for such a system with coordination across the departments of Energy, Defense and Commerce, as well as the Intelligence Community and private-sector stakeholders.
• Third, the order directs key agencies to develop plans to deploy quantum-enabled technologies – notably sensors and network systems – within the next five years. This accelerated timeline reflects an emphasis on near-term operational use cases, particularly in defense, infrastructure and advanced communications.
• Fourth, the order prioritizes workforce and supply chain development. It calls for the creation of National Quantum Workforce Development Institutes, expanded apprenticeship programs and credentialing initiatives, as well as measures to strengthen domestic manufacturing capacity and secure supply chains for quantum technologies.
• Finally, the order enhances governance and security mechanisms by reconstituting the National Quantum Initiative Advisory Committee, expanding federal counterintelligence efforts specific to quantum technologies and directing increased engagement with international allies. These measures collectively underscore the administration’s intent to safeguard sensitive technologies while maintaining strategic alignment with partner nations.

The PQC Order: Accelerating the Migration from Quantum-Vulnerable Cryptography

The second order addresses the defensive side of the quantum transition, directing an accelerated move away from cryptographic systems that could be broken by future quantum computers. Projections for “Q‑Day” – when quantum computers can break widely used public‑key encryption – have become more concrete and, in some cases, more compressed, with some forecasts placing the risk as early as 2030.

The order expressly recognizes the “harvest now, decrypt later” risk that adversaries may collect sensitive encrypted information today for decryption once sufficiently capable quantum systems become available. As a result, it establishes a policy of transitioning both federal systems and supporting critical infrastructure operators to PQC.

To operationalize that shift, the order mandates a governmentwide migration to National Institute of Science and Technology-approved PQC standards; builds in clear governance requirements, including designation of agency-level PQC migration leads; and sets concrete deadlines for transitioning high-value federal systems by 2030 and 2031. The order also directs a pilot migration program by 2027 and contemplates extending PQC expectations to contractors through future procurement requirements, signaling that post-quantum readiness will become an increasingly important condition of doing business with the federal government.

Practical Takeaways for Companies, Universities and Contractors

For companies in the quantum, cybersecurity, semiconductor, cloud, networking and advanced manufacturing spaces, these orders create both opportunity and pressure:

• On the opportunity side, the innovation order is likely to drive additional federal funding, pilot programs, procurement activity and partnership opportunities tied to quantum computing, sensing, networking and enabling technologies.
• On the pressure side, the PQC order indicates that the federal government expects concrete progress on migration from quantum-vulnerable cryptography, and it signals that federal procurement and contractor requirements may be used to accelerate compliance.
• Universities and research institutions should also read the two orders together. The innovation order points toward more support for quantum research, but institutions engaged in sensitive research collaborations will likely face increased scrutiny of research security, technology transfer and foreign relationships as quantum moves further into the national security mainstream.
• Critical infrastructure owners and operators are also squarely in view. The PQC order expressly states that the federal government will assist and encourage critical infrastructure operators in their PQC transitions, and the order’s stated policy objective is to strengthen cryptographic protections for sensitive data, critical infrastructure and the digital economy. For infrastructure sectors with long system life cycles and heavy reliance on embedded devices, legacy equipment and vendor-managed environments, the practical burden of inventorying cryptographic dependencies and planning phased migration could be substantial.

Compliance Challenges and Litigation Risk

The orders significantly raise compliance expectations and related enforcement and litigation risk:

• As PQC migration timelines, domestic sourcing priorities and future procurement requirements take shape, companies will face increased exposure if they overstate their cybersecurity posture, cryptographic readiness or supply chain integrity, including potential liability under the False Claims Act.
• At the same time, expanded counterintelligence and “trusted ecosystem” initiatives point to heightened scrutiny of foreign investment, research collaboration and supply chain dependencies, increasing risk under export controls, the Committee on Foreign Investment in the United States (“CFIUS”), and related national security authorities.
• Cybersecurity liability risk is also evolving. The government’s explicit focus on harvest now, decrypt later threats and its mandated transition to PQC standards suggest that failure to plan for quantum-vulnerable encryption could increasingly be framed as a governance failure, raising potential exposure in regulatory actions, shareholder claims and post-incident litigation.
• Finally, rapidly accelerating private-sector and international developments by nation states indicate that compliance timelines may tighten sooner than expected, further increasing the risk for organizations that delay migration planning or fail to align with emerging standards. IBM, for example, has publicly targeted delivery of a large-scale fault-tolerant quantum computer by 2029, and France’s ANSSI (National Security Agency of Information Systems) has announced that it will stop certifying security products that lack quantum-resistant encryption starting in 2027, with businesses encouraged to buy only quantum-safe products by 2030. Those developments do not establish U.S. legal requirements by themselves, but they are strong indicators that market, procurement and regulatory pressure on PQC is likely to intensify quickly.

Conclusion

Together, these orders make clear that the quantum transition is no longer theoretical. The federal government is simultaneously accelerating quantum development and mandating preparation for its cybersecurity consequences, combining significant opportunity with rising compliance and enforcement risk. Organizations that move early to align with emerging standards and expectations will be best positioned to capture value and mitigate exposure.