Financial services sit awkwardly in the post-quantum transition: heavily regulated, heavily integrated, and holding data whose confidentiality lifetime comfortably exceeds most credible estimates for capable quantum hardware.
Why the timeline is shorter here
The relevant question is not when quantum computers arrive, but how long today's data must stay secret. In finance that horizon is long:
- Client identity and KYC material — decades
- Positions, models, and pricing methodology — years to permanently
- Payment and settlement traffic — long enough to matter
- M&A and advisory material — sensitive well past the deal
Traffic captured today under X25519 or RSA is readable later. That is the definition of harvest now, decrypt later, and it applies to sessions happening right now.
What external assessment finds first
The pattern repeats across large financial estates:
Third-party and vendor endpoints. Portals, custodians, brokers, and fintech integrations, each terminating TLS somewhere you do not control. These are frequently the weakest cryptography in the estate.
Acquired infrastructure. Post-merger environments accumulate services nobody has an owner for. They stay online, and they stay classical.
Appliances. VPN concentrators, file-transfer gateways, and trading appliances often lag badly — TLS 1.2 only, occasionally accepting suites with no forward secrecy.
Edge versus origin. TLS terminated at a CDN may negotiate a hybrid group at the edge while origin connections remain fully classical. The externally visible posture looks better than the actual one.
What regulators are converging on
No major financial regulator has yet mandated post-quantum cryptography on the timelines NIST's draft roadmap sets out. But the direction is unambiguous, and the pattern for cryptographic transitions in this sector is well established: guidance, then expectation, then examination finding.
The organisations that fare well in that sequence are the ones that already have an inventory when the question is first asked.
Where to start
Externally, and immediately — it needs no agents, credentials, or change control. Then classify by whether each finding is retroactively decryptable, which puts key exchange ahead of certificate signatures. See how to inventory your cryptography.