The future of quantum computing and enterprise planning

The future of quantum computing is starting to shape business planning, driven by better cloud access, hybrid algorithms, and new cybersecurity standards. Organizations can prepare by addressing encryption risks and network readiness while developing the skills and measurable pilot programs needed for adoption.

Near-term value will come primarily from workforce development, roadmap creation, and security planning rather than direct quantum use. The risk lies in waiting until encryption upgrades become urgent, particularly for large networks, regulated industries, and long-lived data that must stay protected.

Cybersecurity is the natural starting point because encryption risk gives leaders a concrete way to assess quantum exposure. From there, readiness becomes a broader business discipline, shaping how enterprises modernize infrastructure, develop internal expertise, and test emerging capabilities with purpose.

Quantum computing uses quantum bits, or qubits, to process information in ways classical computers can’t. A classical bit represents either zero or one. Through superposition, a qubit can represent a combination of possible states. Entanglement creates correlations between qubits, and quantum gates—the building blocks of quantum circuits—guide calculations.

This design may help solve problems that become too complex for classical systems, including optimization, molecular simulation, cryptographic analysis, and some machine learning methods.

Today’s quantum systems still have limits. Hardware is noisy, qubits lose information, and error correction is difficult. On top of that, researchers don’t know when quantum computing will become stable enough for widespread use.

The capabilities that create business value could also help cybercriminals attack current encryption. Because the future of quantum computing could provide unprecedented encryption-breaking abilities, malicious actors can steal encrypted data today and retain it to decrypt later.

As a result, organizations face two main priorities: evaluating potential applications and protecting sensitive data.

Quantum computing presents three enterprise challenges: protecting data from future attacks, securing access to quantum resources, and governing data processed by cloud providers and vendors.

Security teams should prepare now. A fault-tolerant quantum computer could break widely used public-key cryptography. Adversaries can also steal encrypted data today and retain it for future decryption, a tactic known as “harvest now, decrypt later.”

In 2023, the Cybersecurity and Infrastructure Security Agency (CISA), National Security Agency (NSA), and National Institute of Standards and Technology (NIST) issued joint guidance on post-quantum preparation. The guidance recommends inventorying cryptographic systems, assessing sensitive data, planning migrations, and working with vendors.¹

NIST finalized three Federal Information Processing Standards (FIPS) for post-quantum cryptography in August 2024:

• FIPS 203 (ML-KEM): Establishes shared secrets for protecting data.
• FIPS 204 (ML-DSA): Verifies identity, authenticity, and data integrity.
• FIPS 205 (SLH-DSA): Provides an alternative digital-signature standard based on different mathematics.²

These standards give organizations a foundation for migration. IT leaders can start by identifying vulnerable cryptography, prioritizing long-lived sensitive data, and reviewing vendor migration plans.

Post-quantum cryptography and SD-WAN

Post-quantum cryptography (PQC) uses algorithms that resist attacks from classical and quantum computers. Organizations should identify where they use public-key cryptography across applications, networks, devices, and security services.

Teams also need cryptographic agility, which allows them to replace algorithms without rebuilding entire systems. Migration plans should prioritize systems protecting data that must remain private for years.

SD-WAN can support broader migration and governance efforts through centralized traffic management and policy enforcement. It can segment network traffic associated with quantum workloads, direct traffic to approved cloud services, and provide visibility into data moving between enterprise sites and external providers.

SD-WAN doesn’t provide post-quantum protection by itself. Its encryption protocols, certificates, management systems, and vendor services must support standardized PQC. Organizations should confirm those capabilities with vendors and include them in migration plans.

Connectivity and cloud platforms

Many quantum pilots use cloud platforms that provide simulators, development tools, and remote access to quantum processors. These services rely on secure classical networks for authentication, job submission, logging, monitoring, and results delivery.

Teams should test service availability, network resilience, identity controls, and audit logging before sending sensitive workloads to external platforms. Pilot plans should include validation benchmarks, security reviews, and classical computing fallbacks.

Data governance and compliance

Data governance policies should specify what information may leave the enterprise, what must remain local, and which providers may process sensitive workloads. Contracts should define encryption requirements, retention limits, audit rights, breach notification duties, and deletion procedures.

Organizations should document where vendors process data and which subcontractors can access it. Audit trails should record data transfers, administrative activity, and workload changes.

Strong planning turns quantum computing from an experiment into a governed business capability. Cryptographic agility, reliable connectivity, and vendor oversight also support decisions about future funding, workforce development, and operational decisions.

Successful quantum programs begin with practical understanding. Clear guidance helps teams identify relevant quantum use cases, see how it affects current systems, and plan future investments.

Workforce development

Quantum readiness takes skills across technical, security, analytics, and business teams. These teams need a shared understanding of quantum computing so they can find useful problems, plan small pilots, and review results.

Cross-functional teams can align business needs with technical plans. A small expert group can guide pilots, set standards, and keep the work focused, controlled, and tied to funding decisions.

Investment strategy

Start small with a few pilots tied to clear business outcomes such as lower costs, faster analysis, better schedules, or improved model performance. Budgets should cover the full effort: cloud access, integration, training, governance, and security review.

Stage gates keep spending focused. Define the evidence required at each step, including problem selection and baseline testing as well as prototype results and limited production use. This discipline distinguishes pilots with measurable value from experiments without defined outcomes and supports vendor and partner choices.

Research and vendor engagement

Universities, national laboratories, cloud providers, and standards bodies can help your team compare methods and track maturity. The National Quantum Initiative continues to support U.S. quantum research and workforce development.³

Your organization should seek clear documentation on service levels, data handling, access control, pricing, and audit support. These details help determine whether a pilot can move from experiment to production.

A measured operating model gives quantum work a place inside the enterprise. That operating model supports a 24-month plan that advances pilots, cryptography, and network readiness together.

A practical 24-month roadmap should advance security work, infrastructure planning, and experimentation in parallel. The focus is on reducing quantum-related risk. It also helps build internal capability and prepare for future business, vendor, and security demands.

Months 1 to 6

Phase outcome: By the end of month 6, the organization has a clear view of cryptographic risk, priority data exposure, network readiness, and the pilots selected for testing.

Months 7 to 12

Phase outcome:
By the end of month 12, the organization has tested priority security controls, started crypto-agility work, and gathered early pilot evidence in low-risk environments.

Months 13 to 18

Phase outcome:
By the end of month 18, quantum work has moved from experimentation toward controlled operations, with clearer governance, operational accountability, and broader internal expertise.

Months 19 to 24

Phase outcome:
By the end of month 24, the organization has separated useful quantum initiatives from low-value experiments, advanced practical security modernization, and established a clearer path for broader adoption.

A 24-month roadmap can reduce risk, build expertise, and identify valuable pilots. As planning moves forward, leaders should address common questions about quantum.

Quantum computing raises practical questions about timing, risk, investment, and skills. These FAQs clarify these topics and explain how businesses can prepare.

Does quantum computing exist in real deployments?

Yes. Quantum computers operate today through cloud access, research facilities, and commercial platforms. Simulators also let teams test algorithms. Fully fault-tolerant, general-purpose quantum computing remains under development.

How soon will quantum computers impact cybersecurity?

The cybersecurity impact has already begun because organizations must plan their transition to post-quantum cryptography. Large quantum systems capable of breaking common public-key encryption are not available for large-scale attacks today. Migration still needs to begin now because inventories, upgrades, vendor coordination, and compliance work can take years.

Do businesses need to buy quantum hardware?

Most organizations don’t need to buy quantum hardware. Cloud access gives your team a lower-cost way to test algorithms, compare hardware types, and assess how quantum workflows integrate with existing systems.

What skills are required?

Start with applied skills in data science, software engineering, operations research, cybersecurity, and network architecture. Add quantum-specific training through short courses, research engagement, or selective hiring.

Clear answers reduce uncertainty, but readiness depends on action. Leaders need a simple way to measure whether quantum planning is reducing risk and creating business value.

Quantum readiness should be measured by progress instead of speculation. You don’t need to predict when quantum advantage will arrive. You need to know whether your organization is reducing risk, securing your network and data, and testing the right business problems.

Use these steps to turn quantum planning into measurable action:

1. Build a classical baseline
   Compare every quantum or quantum-inspired pilot against the best classical method you already use. A pilot should advance only if it improves the outcome, lowers cost, shortens runtime, or supports a better decision.
   
   
2. Measure business impact
   Track results that matter to the business, such as route efficiency, model accuracy, simulation speed, service reliability, risk reduction, or operational cost. Avoid pilots that demonstrate technical feasibility without measurable business value.
   
   
3. Prioritize cryptographic risk
   Inventory where the organization uses encryption across applications, networks, certificates, identity systems, and data stores. Then rank systems by sensitivity, exposure, and how long the data must stay protected.
   
   
4. Test network and cloud readiness
   Review whether your network can support secure access to cloud-based quantum resources. SD-WAN, segmentation, access controls, monitoring, and policy enforcement should be part of the readiness plan.
   
   
5. Create stage gates for investment
   Define when a pilot moves forward, pauses, or stops. Each phase should have clear criteria tied to performance, security review, integration effort, and business value.
   
   
6. Prepare teams before demand rises
   Train the people who will evaluate use cases, manage data, secure systems, and integrate quantum workflows. Early fluency helps your organization make better decisions as vendor options mature.

These steps help leaders move from interest to action. They also create a clear basis for deciding whether to expand pilots, accelerate post-quantum cryptography work, or modernize the network foundation that future workflows may depend on.

The future of quantum computing won’t affect every business system at once. Its near-term enterprise effects will emerge through cryptography, cloud-based experimentation, hybrid workflows, and targeted pilots that prove value against classical methods. You can use the current window to reduce long-term risk, build internal expertise, and prepare your infrastructure for the next stage of enterprise computing.

Prepare your network for the post-quantum era with AT&T Business. Explore secure, agile connectivity through AT&T SD-WAN, and strengthen your protection strategy with AT&T Business cybersecurity solutions. To connect with an expert who knows business, contact your AT&T Business representative.

See how ultra-fast, reliable fiber, protected by built-in security, and 5G connectivity give you a new level of confidence in the possibilities of your network. Let our experts work with you to solve your challenges and accelerate outcomes. Your business deserves the AT&T Business difference—a new standard for networking.

¹ Cybersecurity and Infrastructure Security Agency, “Post-Quantum Cryptography Initiative,” accessed August 27, 2026, https://www.cisa.gov/topics/risk-management/quantum.

² National Institute of Standards and Technology, “NIST Releases First 3 Finalized Post-Quantum Encryption Standards,” August 13, 2024, https://www.nist.gov/news-events/news/2024/08/nist-releases-first-3-finalized-post-quantum-encryption-standards.

³ National Science and Technology Council, National Quantum Initiative Supplement to the President’s FY 2025 Budget (Washington, DC: White House Office of Science and Technology Policy, 2024), https://www.quantum.gov/wp-content/uploads/2024/12/NQI-Annual-Report-FY2025.pdf.