A report by Brian Couzens (SITG Consulting)

From the guidelines:
“This report assesses publicly verifiable national preparation for the migration to post-quantum cryptography (PQC) across all 27 Member States of the European Union, as at 3 August 2026.

The assessment was conducted because the discussion of post-quantum readiness has become dominated by declarations of intent. Standards bodies have published algorithms. Governments have published statements. Vendors have published readiness claims. Very little of this establishes what any given state has actually put in place. The question this report addresses is narrower and harder: what can each Member State publicly demonstrate that it is doing to govern the replacement of quantum-vulnerable cryptography in its own national estate? […]”