One of the hardest parts of running a business is deciding which future risks deserve your attention today.
You can’t prepare for everything.
But every now and then, something comes along that needs planning for long before it becomes a real problem.
That’s what’s happening now.
Microsoft has announced it’s speeding up work on something called “post-quantum security”.
The name sounds technical, but the thinking behind it is straightforward.
Today’s encryption keeps your data safe by making it incredibly difficult for computers to crack the code protecting it.
Modern computers would need an unrealistic amount of time to break that encryption.
Quantum computers could eventually change that.
They’re a new type of computer that’s still being developed, but they’re expected to solve certain mathematical problems much faster than the computers we use today.
If that happens, some of the encryption protecting data across the internet may no longer be strong enough.
Nobody knows exactly when that day will arrive; it could still be years away.
But Microsoft isn’t waiting to find out.
It wants its major services ready for this new era before the end of the decade.
That means updating the technology that protects everything from online services to software updates and digital certificates.
Those certificates are the digital credentials that help your devices confirm they’re talking to a genuine website or service rather than an imposter.
One reason for acting now is something we call “harvest now, decrypt later”.
Imagine someone steals encrypted information today.
They can’t read it now, so it appears useless.
If quantum computers become powerful enough in the future, that same stolen data could potentially be decrypted years later.
That’s why organisations responsible for protecting huge amounts of sensitive information are already planning.
Right now that probably doesn’t mean a lot for your business.
You’re unlikely to be making decisions about quantum-resistant encryption any time soon, and there’s no need to panic about replacing your systems.
But it does highlight something else: Good cyber security has always been about thinking ahead rather than waiting for problems to arrive.
Businesses that update software regularly, replace ageing systems before they become unsupported, review security policies, and keep backups in good shape usually cope far better when new threats emerge.
They’ve built flexibility into their technology instead of leaving everything until the last minute.
That’s what Microsoft is doing here.
It’s preparing for an attack that may happen years from now because large technology changes take time to implement properly.
While you don’t need to plan for quantum computing today, you do need to make sure your business isn’t still relying on outdated systems, unsupported software, or security measures that belonged to a different era.
Whether the next big cyber threat arrives in two years or ten, businesses with strong foundations will always be in a much better position to deal with it.
If you’d like to review whether your technology is ready for the threats of tomorrow as well as the challenges of today, get in touch.
