A GAO audit found that all 24 CFO Act federal agencies are unprepared for post-quantum cryptography migration, with none having fully implemented the required preparatory practices. The audit, publicly released in October 2026, revealed significant deficits in cryptographic asset inventory, migration funding assessments, and operational PQC testing. This lack of readiness leaves critical federal data vulnerable to future quantum attacks, particularly from "harvest now, decrypt later" tactics by hostile nation-states.
The post GAO Audit Finds All 24 CFO Act Federal Agencies Unprepared for Post-Quantum Cryptography Migration appeared first on Quantum Computing Report .